[orthoxerox]

Something simple like a face match or even an email unlock if you connect to the account from an unusual location should work. A lot of websites do that already. So a volunteer doctor from the US opens their phone in Lagos, gets challenged, answers, Meta now knows that Nigerian IPs or whatever VPN they use are fine.