If you can grab a phone from someone you can execute a much simpler physical attack called rubber hose cryptanalysis :) So yes what you are describing is nonse

If you can grab a phone from someone you can execute a much simpler physical attack called rubber hose cryptanalysis :) So yes what you are describing is nonsensical you need to know the target, be able to steal their device and use it within a time frame before it would be disabled. And this is if they don’t use say an iPhone or an Android phone with biometric login which often hides the notifications. Also the biggest hole in this premise is that you wouldn’t even care if the device displays texts when locked or not since if you have the device you can take out the SIM and put it into your own phone. So based on this any TOTP or U2F token is useless since they can be stolen and used. Seriously if this is your threat model I don’t think you should leave the house since you are clearly in a lot of danger.