Interesting how they make such an assertion, but refuse to issue the tokens necessary for mail applications to access their system using their supposed secure method.

Basically they are blowing smoke and making it harder not to use their advertising infested web sites. Just allow less secure apps and the security of a user name and password will continue to protect you, unless Yahoo get hacked again and the usernames and passwords are again released.