Nest still recommends that users migrate to Google accounts if they want to stay secure, although there is a caveat: you can’t currently link a Nest account if you have Google’s Advanced Protection turned on. Google is fixing this, but doesn’t have an estimate for when that solution will be ready.

It’s not hard to see why the Nest team would bolster its safeguards. The vulnerability of smart home systems has been a sore point for years, and it’s becoming more of an issue now that Nest and others have a host of connected alarms, cameras, doorbells and locks. An account takeover could compromise your privacy and even your physical safety. The additional hassle of two-factor sign-ins might be trivial compared to the fallout from a breach.