Why yes. Because SMS isn't good enough, the sekhurity industry decided everyone needs to use apps instead, since they can communicate over SSL and are harder to spoof, and then threw in remote attestastion for extra sekhurity.