A phone isn't being used alone though. It's just one part of a 2FA system, right?