“It’s a problem with most 2FA (two-factor authentication) systems, to be honest, it’s not WordPress-specific by any means.”
@james: Your statement is not entirely correct. Services like Google Apps and Microsoft Outlook make it quite easy to migrate two-step authentication to new phones.