@SeanWrightSec I object in principle to the name 3FA. What they're describing is something you have (the company machine), its just a 2nd 2nd factor. And as you say, the 2nd factor could already be hardware based