PinePhone has most of those, but if you're insisted on a specific app/brand, you are limiting yourself. For instance, Mobian comes with a 2FA app. Authy is a bad security choice anyways because you shouldn't send your 2FA tokens to a cloud.

> Authy is a bad security choice anyways because you shouldn't send your 2FA tokens to a cloud.

Curious what your solution is for non-cloud backed up 2FA tokens. Phones break, get lost, and get stolen, so backups have to be done somehow.

Those QR codes are much safer on paper, secured well, than any digital medium that can be hacked.

The cloud is a dumb place to store secrets, as anyone on the planet can attack your secret storage. Almost any offline medium (including a Post-It stuck to your monitor on your desk!) is inherently safer.

You are always free not to install the latest update and have the android experience of using an old version OS on a 2 year old phone. On a serious note, I don't think they reduce your battery on purpose, the class action lawsuits Apple lost handled that. It might be just optimising runtime and letting your phone handle new apps? So CPU runs faster and squeezes out more performance?

Yeah, I'm pretty far from being able to switch to a Linux phone without the ability to read TOTP tokens from YubiKeys. For apps that don't support hardware tokens, I store the TOTP seeds on a YubiKey, which prevents malware on the phone from being able to steal my seeds.