PSA: You don't need the Token app to enable 2FA anymore.

[hobostew]

I imagine niche situations like that are why they give you the option to ask for authentication every time.