Losing access to Authy leads to another reckoning with Google’s security model.