Re: WTF ????
" there is always the chance of the “something you have” part being stolen along with the actual device being secured."
Which is why a 2fa token number should always be accompanied by a pin to gain access. That way even if someone puts their mitts on the seed file they still have to guess the pin.