Will this require that the Authenticator app has to ALWAYS be used to sign in?
If not, then it is not secure.
