PSA: You don't need the Token app to enable 2FA anymore.

[linayar]

I imagine niche situations like that are why they give you the option to ask for authentication every time.

Indeed, though I think, when it comes to security, sometimes giving people option may be too risky when people have been shown to fall victim at what should've been obvious dangers, or sometimes people are not even aware that they are in danger through no fault of their own.