@monnier @jzb @maj
The "unlock phone" itself requires two authenticators.