I think his point was that if your password is stored on your phone, two factor authentication doesn't actually add any security because it's no longer two factor.