Comment by tptacek

It's more efficient, but remember the point of this story, which is that it mitigates phishing attacks, which code-generating 2FA applications do not.