Oh snap, author here. I completely forgot to mention how two factor authentication can be a ploy to get more ids for the cross-device graph, and you just reminded me. Next post maybe!