Please give some evidence that this is due to hardware tokens failing where a smartphone based solution would have prevented it