I made the same comment and I got downvoted as well. I don't vacri is saying it is bad to get the app from the Google App store. What is not enterprise ready is the Google Authenticator app itself. I use Google Authenticator for every consumer application which supports it, but it would be a mistake for an organization to use it to protect employee access to networks.

The RSA app also comes from the play store.

So installing a random apk for http://enterprise.com is better?

Increasingly enterprises are allowing BYOD for this, with or without content protection systems like airwatch.

Totp is a standard protocol.there are multiple f/OS's that do it and are installable from f-droid or buildable and deployable as an apk. The method of getting the app isn't important.

If you don't want google authenticator, you can use oathtool to do that.