[warning26]

Definitely a good reminder to use a secure passcode for your phone. (And to definitely avoid the 4-digit pincode.)

I suppose realistically since your phone is almost always the "second factor" in 2FA, if your phone is stolen+compromised you're completely screwed. Do there exist 2FA solutions that don't become 1FA if it's just your phone?

[gkiely]

Agreed, I updated my passcode to an alphanumeric after this happened.

I am not aware of such solutions but would be interested to learn more if there are.