I believe Apple prefers that people use a trusted device as from their point of view this is more secure as they can verify the entire communications loop so they view this as a fallback option, but you certainly can use non-Apple devices to authenticate. They also don't appear to throw up any roadblocks to doing so.