Their point was, there's only one factor here: something you have. There's no password you give the site. So it's one factor. It is probably significantly saf

Their point was, there's only one factor here: something you have. There's no password you give the site. So it's one factor. It is probably significantly safer than just a password, since nigerian hackers can't steal your phone from a huge poorly secured database.... but it's still just one factor.