The user experience for enabling apps with Google’s two-step verification turn on is an absolute joke. Google has been pushing this feature recently — and rightfully so. It is so much more secure than the traditional username/password approach. But if they ever hope to have an actual human being use this and not a few thousand tech geeks, this is going to have to be entirely re-thought.
In other words, copy what Facebook has been doing.