I am used to 2 factor where I use my password and get sent a unique code. Here I have to generate that unique by doing a bunch of stuff rather than automatically receiving it. Looking deeper, I wonder how insecure it would be if I ONLY used that one time generated, unique code? I mean I do have to tie my generating app with SE (essentially serializing it so SE recognizes it’s mine along), can a third party replicate that serialized app?