I share the two-factor app problem. Currently, I use the 2FA app on an old Samsung Galaxy S8 I keep in my desk drawer, which contains nothing but the 2FA app and Samsung/Google bloatware. It works as long as both devices have an Internet connection.

The problem with this, of course, is that now I have two smartphones, when I want to exist in a state where I require zero smartphones. It didn't solve the problem of needing the 2FA app or a smartphone, just the problem of me not wanting the 2FA app to be on my daily driver phone.

"You don't exist without a smartphone" is definitely a pervasive problem. So is "it's not a violation of your rights if we do it with an app."