Apple’s two-factor authentication system needs to change — here’s why