So you're dependent on a cloud startup for basic auth and you've got no more security than any other isolated two factor auth system.