There is more than 1 way to do 2FA apps. I'm a big fan of push-based authorization like Duo Security does it.