I wouldn't say it's BS. It's just not perfect. The standard person today isn't capable of managing multiple secure tokens, and actually keeping them separate.

I wouldn't say it's BS. It's just not perfect. The standard person today isn't capable of managing multiple secure tokens, and actually keeping them separate. One smashed phone, and truly secure accounts would be lost forever, or require significant resources on the part of the provider to re-verify people's identities.