Of course, the context here is that every additional security measure is because a scammer has already used that method to hijack accounts or perpetuate fraud... which means that every succesful company with a similar market will either eventually follow the same trajectory or see its support and verification costs balloon into total unprofitability.
