Has it ever occurred to anyone that, just maybe, the whole NSA thing is a cover-up to distract the attention from the fact that it's actually the megacorporations that want to spy on you? This is a good way for Google, Microsoft, etc. to look innocent. Let's not forget that it was us who decided to trust these corporations with all our personal data.
Two-factor authentication requires me to give my phone number to the companies whose products I use. That way, my Facebook profile can get associated with the GPS location that my mobile phone may transmit. This does not seem like a good measure for privacy.
Why did Levison have access to their users mails in the first place? Didn't they claim that only you can see your emails? Isn't that the reason you can't reset your password?