Not giving a secondary option for mfa that actually works when i have replaced a device is completely asinine and renders your service worthless. It's the kind of poor programming that will likely cause me to go with a different manufacturer the next time I upgrade.