Twitter is demanding payment for security. What should users do?

Getting login codes via an app is more secure but very few users do it. Twitter’s tight-fisted announcement could spur change.