Surprised there (this far) no mention of Authenticator Plus (https://www.authenticatorplus.com/) here. I welcome scrutiny of this option (but I am not affiliated in any capacity with them)