Interesting point "If you ever lose or forget your phone and have login approvals turned on, you will still have the option to authorize your login provided you are accessing your account from a saved device."
In contrast to Google's solution which provides you with a set of fallback codes.