I liked two step authentication when it came along. Google is at the center of my digital experience. Android is an easy choice for me. I might still get snooped upon for I use many services online. But if I can at least be sure my Google ID will not be compromised, that is a lot of peach of mind.
And now there is a physical key. That would make it even more secure. But I would not want more than one key. This three step authentication and the ability to Google sign in into a whole bunch of services would take care of a lot of security issues.
The Second Coming Of Sign In With Twitter