My tokens being sent to an external server that I don't control is a dealbreaker for me, sorry. I get the convenience factor, but my security relies on the abs

My tokens being sent to an external server that I don't control is a dealbreaker for me, sorry. I get the convenience factor, but my security relies on the absolute secrecy and control of those tokens; I'm not willing to trust those to anyone else. Any company that requires 2FA is likely to have a similar policy; leaking the keys to the kingdom to a third party which is not subject to security audits is going to be a non-starter. Bluetooth integration is a compelling feature, though.