Google should publish a good API for this, and allow everyone to use it. I'd love to have opt-in TFA for all of my sites.