Re: Password policies .... arghhhhh
If I worked for a company who wanted to get access to my phone, root it and install an app on it for 2FA, they would have to provide a phone to do it on.
My last employer before I retired, wanted me to install whatsapp on my phone, I said no so they gave me a cheap no name smartphone that I discovered had a tracking app on it, disabled the app, lost the phone twice and dropped it in the sea while working on the boss's yacht.
They didn't bother with a replacement.