“Something you have” is your phone. An authenticator app merely confirms that you have your phone. In years past, a texted code was enough to confirm that you did, indeed, have your phone. Even though ...