You would get your password from the mobile app and type it in manually. For a suitably long and random password that takes effort but it should probably happen

You would get your password from the mobile app and type it in manually. For a suitably long and random password that takes effort but it should probably happen so rarely that it won't be a common annoyance.