Your only as strong as your weakest point - this should have been a standard part of 2FA from the outset!