Lee Stranahan
https://twitter.com/stranahan/status/1006953555150843905
It is not that you autistic explantion is too sophisticated. It is because it is simple flawed logic, due to a misunderstanding of what two-factor authentication really is.
Something you know….(e;g password)
Something you have… (e.g "a token")
Something you are….(e.g biometrics)
Understanding the Three Factors of Authentication
http://www.pearsonitcertification.com/articles/article.aspx?p=1718488
Call him up and ask him