Good news for keeping your games secure, as GOG have announced they've added support for authenticator apps for two-factor authentication (2FA). Previously GOG only supported sending a code via email, but now you can pick whatever auth app you want.
If you have email codes on, you have to first disable it. Then GOG will give you a QR code to scan via your favourite auth app (or a code to manually enter). As noted on the GOG news post. Not much more to it than that!
This is great to see. I hope Valve eventually follow this for Steam, as currently Valve only offer Steam Guard which forces you to use their mobile app, which they don't exactly put a lot of time into. Would be great if Valve also allowed you to use your favourite auth app.
While you're here, perhaps take a look at some of the current sales on GOG like:
In case you missed it; GOG also recently announced they finally added dynamic bundle pricing.
I understand your criticism of Steam Guard, while it would be nice to have an alternative, I think the Steam Guard app itself is really good. It shows your login history including IP address and location of the login so you can check for fraudulent activity. It also offers some other nice features such as Remote Download to your PC.
@Stella
You can download games via the website as well, no need for the app for that. :)
See more from me