> This and ZDNet's article don't claim this is a vulnerability or bug > The article doesn't even claim Google Authenticator or third party apps should mitigate

> This and ZDNet's article don't claim this is a vulnerability or bug > The article doesn't even claim Google Authenticator or third party apps should mitigate it Second sentence of the article is "I doubt Google will ever release a fix for this issue". We could argue about the semantics of "issue" vs "bug" (though I'd rather not), but it seems pretty obvious the author thinks of this as a fixable "issue", when the parent comment's point is that it absolutely isn't.