In other words, you also have a system of password reuse (a personal password instead of a per-account password?!)? Also, how is the reliability of the 2FA dev

In other words, you also have a system of password reuse (a personal password instead of a per-account password?!)? Also, how is the reliability of the 2FA device established? If there were some claim before a court that you authorized some sort of transaction, what would they have to demonstrate to prove your liability? What will the court do if you question whether the numbers generated by the 2FA device are actually cryptographically random?