real security would mean implementing proper two factor authentication instead of running two apps on the same phone and calling that two factor authentication

...

https://lists.fsfe.org/pipermail/discussion/2024-February/013383.html