> Authenticator apps should not give notifications, users must open them manually.

Agreed, the constant “Are you trying to log in / reset your password?” notifs Google send me are concerning because I’m afraid I’ll accidentally tap “Yes / Allow”!