I wonder if there's an equivalent on iOS for andOTP. It puts the backup responsibility on the user in which you can export all tokens to plaintext or password-secured encrypted text. You ultimately put trust in the app maintainers instead of a third party like Authy.