> The attack vector that I'm thinking of here is your phone being stolen This is exactly why I'm a big fan of larger, heavier devices, such as my rack-mounted

> The attack vector that I'm thinking of here is your phone being stolen This is exactly why I'm a big fan of larger, heavier devices, such as my rack-mounted desktop PC, being their own 2FA device. It's pretty hard to steal my 4U desktop that is bolted down, there's no reason why it should depend on anything else for 2FA. Similarly, laptops should be their own 2FA device and not depend on a phone, since people are generally more careful to not take laptops into high-crime areas.