I agree, but only for a couple very important sites. You should have it on for email and whatever administers your domain (google, etc). Banks that hold your money, yes - probably not worth it for banks where you only have credit cards. The rest? No, unless you actually get income from them. Do you really care of your Instagram account gets hacked?