[nlawalker]

> But neither of these is a good argument for why the data should be kept together

The argument is "because many people, if they can't keep the data together, will elect not to use 2FA at all if given a choice."