But why phone? Why not something more specifically set up for the purpose, like Google authenticator or 2fa keys?