[InitialBP]

The “whole point” of 2fa is that even if someone knows your password they cannot login with just credentials.

Compromising or stealing a device is a significant escalation from guessing passwords.

[0cf8612b2e1e]

It is also more obvious when your device has been stolen vs just the password.