Don't forget the sudden addition of a largely pointless security-theatre other factor auth scheme which requires a mobile device and an application that requires far, far too many privileges for the trivial job of smoke and mirrors. Apparently it makes the account more secure, however given that there is no way to guarantee the providence of the mobile device and the setup of it, it just makes it annoying instead.