Based on a certain recent high profile hack, getting just one 2FA auth this way could already be enough ;-) I doubt most people would be suspicious if their sy

Based on a certain recent high profile hack, getting just one 2FA auth this way could already be enough ;-) I doubt most people would be suspicious if their system prompted them to touch their key, they touched it, the software kept waiting, so they touch it again and it works this time.