> [...] has to at least have the physical device on hand.

not really since most of them are connected 24/7