You can disable the multi-device capability of Authy to lock it to a specific set of devices e.g. primary and a backup burner if that's your thing.