That additional information would vary, but you basically would follow the same process for someone who loses their device (and along with it their TOTP authent

That additional information would vary, but you basically would follow the same process for someone who loses their device (and along with it their TOTP authenticator app). You might send them a SMS code, require them to call in, etc. Basically it'd be no different than what companies already do today when someone loses their device and their authenticator app.