I'm not a fan of biometrics (I have a fingerprint reader on my laptop) because you can't change your password once it's stolen.

The "Log-in with your iPhone?" could be coupled with some kind of non-biometric authentication and that would be better. But honestly, two-factor with strong passwords are more than enough. The dismal security scenario is mostly cultural, not technological.