Idea: classify token/phone switching policies

[Flameeyes]

A number of sites with 2FA effectively require you to disable 2FA to switch between accounts. Knowing which one of those do this would be useful to know how to make the right security compromise.

It may be too much details for the base user though :(