This is insane. You don't relinquish control of your 2FA token for ANYTHING. You are basically allowing someone else to plug in your phone to whatever poisonous

This is insane. You don't relinquish control of your 2FA token for ANYTHING. You are basically allowing someone else to plug in your phone to whatever poisonous hardware they choose.