Are these credentials all that are needed to impersonate your authenticator? This seems "bad" - as I'd personally expect there to be no "magic" data migration

Are these credentials all that are needed to impersonate your authenticator? This seems "bad" - as I'd personally expect there to be no "magic" data migration path between different apps. There should be a confirmation step from the security manager at least.