How would it know it wasn't your current device? They'd have to leak some special data via Safari. Furthermore, does it matter? There's a fair chunk of users wh

How would it know it wasn't your current device? They'd have to leak some special data via Safari. Furthermore, does it matter? There's a fair chunk of users who only have one Apple device, capable of producing those codes, anyway. If the attacker already has an unlocked phone from the user, chances are they're already pwned anyway..