The state requires this as single sing-on to several other entities. By owning both your password (which they have by definition, it's where you log in) and the 2nd factor (it's an algo on their app, conveniently backed up on their servers).
It's already public five eyes did worse in the past. This is very much in their alley.
What what reason you would have to REMOVE security features you already had in place?
silly take.
The state requires this as single sing-on to several other entities. By owning both your password (which they have by definition, it's where you log in) and the 2nd factor (it's an algo on their app, conveniently backed up on their servers).
It's already public five eyes did worse in the past. This is very much in their alley.
What what reason you would have to REMOVE security features you already had in place?