Looking at how 2FA secrets are synched The synching appears to happen without any encryption. Google sees the secrets. If there is a breach… Defcon Social @mysk