Should Apple extend two-step verification to all iCloud data?