Another drawback of Google Authenticator that a reader pointed out is no passcode or biometric lock on the app. And this ease of access to the app seems to allow malware to steal 2FA codes directly from Google Authenticator, giving you yet another good reason to dump the app.