Not sure we'd be able to implement this in a generic way (easily) for third party MW installs, but GitHub for example allow a logged in session on their mobile app to be used as a form of 2FA.
With the official Wikipedia app, this is maybe something we could do (eventually)...