I realize that pseudo-2FA by sending a pin by email isn’t the greatest. But it’s made worse by having email on my phone totally open to anyone who can get into the phone. (Yes, promoted by the recent reports of shoulder surfing.)

Are there any iOS email apps that are secure against other users who have the phone and the phone pin? Outlook is the only one I’ve found that comes close, but it uses the default “FaceID failed, enter your phone PIN” fallback. I’d hate to have to try each one on the App Store if someone else already has some answers.

Or, I guess, the alternative is to allocate an email account that I only use via web login. But web UIs are often hard to use on phones, even when designed for phones.