1. 8
  1.  

  2. 3

    This makes things very easy for thieves. Just grab someones phone out of their hand and you can empty their bank account, sign up for a bunch of credit cards in their name, disable their home security system, and notify their kids that a stranger will be picking them up from school and that he is totally trustworthy.

    One-time codes are vulnerable to this too of course.