Article doesn't do a good job of explaining Only allow secure two-factor methods

Article doesn't do a good job of explaining Only allow secure two-factor methods #6027