I work for a global company and help manage MFA for everyone...I use Google's authenticator on my personal phone as they didn't give me a work phone.
I still don't understand why a hardware token isn't being used. It's such a low cost option when compared to buying a phone and plan for a user.
But not everyone needs to have a work phone, some just need to authenticate