I don't care how it works, but as long as it requires me to physically have some device to log in (and doesn't have a backup, like emailing me or calling me), it puts security in my hands.