I don&#x27;t really understand authy: does it not keep your 2FA tokens in &quot;the cloud&quot; behind a password? Therefore, does this not make them equivalent to a password, and negate the whole point of 2FA?