I have a suite of work apps on my phone. One that is sort of non-negotiable is my second factor authentication app. I theoretically could trade that if for a physical token, but then I’d have to keep track of that too. 2FA can notify me -- if only does so if I’m trying to log into another device. I also have an email…