[cumshitpiss]

Nothing wrong with your second factor being the same device.

The point is to combine something you know with something you own. The thing which you own can contain your passwords too.

[omniglottal]

When the something you own contains passwords, it replaces something you know and all you are left with is one factor: the device.