1 factor of 2 factor auth is completely useless without any identity to tie it to
People are saying you shouldn’t put a number in there because if it’s not already in there, you are leaking some kind of privileged information.
That’s not true.
So putting your phone into a website also ties it to your identity.