The fact that you physically have the device generating the OTP is as secure as it can get!