But they could allow other 2fa apps, but they force their shitty one.