They just use an SMS code instead which is not secure at all.
why not distribute hw tokens for purposes like this? it has the least flaws IMO.