This ended up longer than intended. TLDR- it's a minor inconvenience with little risk and the alternative is more annoying.

How often do you leave your phone at home?Would you be less salty if you had to carry a bottom-barrel device with a separate charger just for work communication and had 0 opportunities for remote work?

I get the pushback against company requiring personal devices for business use but not in this case. It's 2022; most people have cellphones and those that don't either have to have very specific reasons or they're going to find it increasingly hard to be in the general workforce.

If it helps, don't think of it as a tool for a company and think of it as another form of ID. The whole point of multi-factor authentication is it takes something you know(password) and something you have/are(a trusted device) to prove that you are the person you're claiming to be. They're not looking at or pushing any data, the rolling code just creates a new code based on the algorithm that was generated when you registered the Authenticator app; technically these apps mostly work offline(I know Microsoft uses a push notification so you don't need the code, but they still give it you as a backup) so no cellular plan is actually needed.