Bring out your dead, your antivirus, your SMS 2 factor authentication

from here

Nothing is perfect, and having an imperfect thing can still be an improvement over having nothing at all. Maybe it fails under certain circumstances, but doesn't mean there aren't other circumstances where it's useful.

No one wants to hear holier than thou security pundits spewing mindless negativity about something that does actually work a good deal of the time. It's unhelpful and annoying.