①"Don't turn it on." "it turns out the traffic is not end-to-end encrypted. ...this means that Google can see the secrets, likely even while they’re stored on their servers." ②"Google Authenticator still offers the option ...We recommend using the app without the new syncing feature for now."