When they deployed wfh, they used mfa. They banned Google authenticator out of the view Google can't be trusted. But told people to search the app store for any other mfa app. They one my wife found makes you wait for an ad run before it displays the code. It sometimes crashes and is generally terrible.
The point being banning certain apps seems far more political than well thought out.
TOTP is a standard (https://www.rfc-editor.org/rfc/rfc6238), so I don't see how that wouldn't work.
TOTP is a standard, so anyone can implement it.
This is just a way to get the governor’s name out there as a VP candidate. Taking an anti-China stance sounds tough and decisive. She was pretty good getting her name out during COVID.