57.5% of the apps still don't offer 2FA authentication, and 12.5% don't bother to check whether the SSL certificate is legit.