How would Datacard (Entrust) continue to authenticate all those cards via OOB. I'm sure that R&G schooled them on the useless 2FA inband systems and this is the best way to authenticate all their clients.

IMO