On: Google introduces mandatory 2-Step Verification for Google Accounts

[EVa5I7bHFq9mnYK]

The whole point of 2FA is that 2 devices need to be compromised - your phone AND your computer. With desktop Authy only one device - your computer - needs to be compromised.

[dazc → EVa5I7bHFq9mnYK]

This is correct but, in the vast majority of cases, attacks are carried out remotely. I would agree that where third parties have access to your machine, it would be not be a good solution.

[EVa5I7bHFq9mnYK → dazc]

If someone controls your computer remotely, it's the same as if she controlled it physically, no difference from pownership point of view.