how Google is replacing SMS-based 2FA in Gmail with QR-based authentication to reduce fraud and carrier risks.