Not everybody has a smartphone, and the phone authenticator is arguably less secure than the physical token.

Also having to remember/keep that emergency reset password and redo things every time you wipe your phone, upgrade to a new one, or delete the app accidentally or whatever is a hassle.