The Advanced Protection program currently consists of the three main elements: defending Gmail and Google account users against phishing attacks by requiring 2FA via a token generated by a hardware security key; locking down the risk of malicious applications grabbing sensitive data by automatically limiting full access to Gmail and Drive to just Google apps (for now); and reducing the risk of hackers gaining access to a Gmail account via impersonation by adding more steps to the account recovery process. Safe to say, this is greater security via reduced convenience. And is being billed as most definitely not for everyone — but rather for a small minority of users at “elevated risk” of targeted hacking. Google cites examples such as political campaign staff working to get their candidate elected or journalists whose job is to handle sensitive information.