Twitter's recent change to two-factor authentication restricts SMS verification to paid subscribers only, claiming that it enhances security. The company frames this as a security improvement, but the real story reveals it is likely a cost-cutting measure. Instead of pushing users to more secure options, it may leave many users less protected.