@sil @Edent yeah, android authenticator now has backup (by default?) but it's been a bit of a security nightmare as its now a really valuable target. (also how do you do mfa for Google if you lost your device doing totp for Google...).
Backup codes I think are really poorly understood too!