True. While it's definitely more secure than their other 2FA offering (storing them with your passwords), it's still the same developers making both - so it still feels like putting all my eggs in one basket.

For IOS I can see this as a valid option, because unless you are willing to trust Microsoft, Google, or Authy with your 2FA, which I personally don't think one should, then you haven't got too many options.

But on Android there are plenty others that are known to be reliable, Aegis for example, so the value proposition is lessened for me at least.