I’d be concerned about storing both authentication factors in the same location, maybe if you kept passwords in one db and passwords in another. Not sure how well mobile apps support multiple dbs though

Break for election day I believe