As @voltronic and others have pointed out already, there's a large, coordinated push to have google sell you a fob to increase your online security.
I won't go into the merits or flaws of these, but I will say. Unlike the stories Google's been pushing, this is no panacea.
With these an attacker may not be able to get into your email, but there are more types of phishing out there.
The name has changed, but a phish is still a con is still a grift. online or offline.