A better idea is to just turn it on for 2FA, then turn it off again.
Other sibling mentioned IMEI pinning, but I assume the emulator can spoof IMEI.
I am all for a separate physical device, just not a phone.