Just to clarify, these "normal people", they are the ones who typically click on links in phishing emails without actually thinking?
> an Android phone and an iPhone and they are completely sequestered from each other
Q: Why would one not expect to have devices sequestered from each other?
Anyway, umm, OK. Sounds like this "solution" means normal people are fine, anyone who isn't normal has a new mountain to climb.
Yes? Heh, you know what normal people means, good. Guess what, phishing emails tricking people into visiting fake websites won't be as effective as with this flow there is no password for them to type in and accidentally give away to the attacker.
> Q: Why would one not expect to have devices sequestered from each other?
Because most people don't carry two phones or bother sequestering devices. It isn't the common case so it isn't a polished flow. At least not yet.
Don't know about a mountain as you probably use a password manager already, it isn't much different.