Welcome to the forum, and thanks for the heads up-- I'll forward this to the appropriate team.
Are you aware that Salesforce has recently added native Universal Second Factor
As a quick introduction, U2F is an open authentication standard that provides built-in phishing and Man in the Middle protections (not found in OTP implementations) while simultaneously providing your end users a simple to use (and set up!) means of 2 factor authentication.
As a co-developer of the protocol, Yubico supports U2F with all of its YubiKey 4 and YubiKey NEO form factors
In other words, you can accomplish highly effective two-factor authentication without
needing to install a third party Salesforce application.Here's a link to our internal knowledge base explaining how to get started
https://www.yubico.com/support/knowledg ... istrators/Here's a link to a recorded webinar we held with Salesforce talking about the U2F integration.
If you're curious about what the login flow/administration looks like, I'd suggest giving this a watchhttps://www.youtube.com/watch?v=Krlq0L3Ud7M
Let me know if this helps!