Comment by mystifyingpoi

It's a good question. At work, we were given an option: install non-intrusive authenticators on your personal phone (you are free to disable their notifications fully, and you get some extra money as reimbursement) or you are given a company phone (that you have to carry to work and back, have to charge and update etc). Most non-oncall people decided to pick option 1. Oncall people picked option 2.