Right, but these phones have the wrong UTC, if I understand correctly. That's why they are in the write-up. Wrong local/display time is pretty hard to detect,

Right, but these phones have the wrong UTC, if I understand correctly. That's why they are in the write-up. Wrong local/display time is pretty hard to detect, unless you have coordinate data. Given that, two factor where the second factor is a local authenticator program is not exactly a common thing.