MicrosoftRajat Luthra thanks for your response.
Sure, if biometrics are enabled, that's a "something you are" factor (not a fan of those, but that's another discussion). If the app itself is the "something you have" factor, but this second factor is also the data itself, it's not really a factor, its the workload.
I am saying that the MFA app would be like a car key. Why would we make the car key a part of the car itself? Put another way, why is there a dedicated authentication app in the first place? Why doesn't the authenticator app fetch my email or grant me access to my Azure workloads?
In the end, I'm advocating a clear line between authentication and the user workload itself.
