Isn't a good use of 2 factor authentication is that you log the machine that a user regularly logins in from and if they try to use a different machine, it asks for the one time code?