> So your fancy two factor authentication still ends up resting on one piece of secret info as the weak point. Am I missing something? A vastly reduced, easily

> So your fancy two factor authentication still ends up resting on one piece of secret info as the weak point. Am I missing something? A vastly reduced, easily managed attack surface area that in practice results in overwhelmingly fewer account compromises.