Funny how apple purposely breaks this for convenience. Some merchant or bank will try and implement 2 factor from a code they text you. Apple scans your messages in the background and prompts you to fill the code from one click all from this one “factor” thanks to the imessage/sms integration.
Even without Apple’s help, anytime I’m on my phone I get the 2FA code on the same device as I’m logging in on. It defeats the point. But also, I shouldn’t be required to have 2 devices just to login to a website.
I’ll be traveling later this year and I’m debating buying an iPad mini so I have a 2nd authenticated device that can do 2FA. I broke a phone on a trip once and happened to have an iPad with me. It was the only reason I was able to get my replacement phone setup. I’m not sure what I would have done without it. Print and carry around account recovery details that should likely be kept in a safe? That doesn’t sound great.