Two-factor authentication isn't perfect, but it's much better than not using it at all. Here are the various risks and what you can do to protect yourself.