The setup process is telling me that since I use an iPhone, an iPad, and outlook, I'll need to setup application specific passwords that bypass the two step process... ...doesn't that render the whole thing moot? Hacker could brute force that password as easily as he could the current one. Or are there additional checks that would prevent him from using that specific password on any device other than my iPhone or my iPad, etc.