I'm assuming you mean sending a one time passcode to the AP account? I think that would be a great idea. But it's also highly phishable. And full AP integration

I'm assuming you mean sending a one time passcode to the AP account? I think that would be a great idea. But it's also highly phishable. And full AP integration allows users to own their data if they want.