The FAQs on the page says there are "secure and reliable recovery options" when the device with the passkey is lost. I wish there was more explanation for that because trying to help people recover Microsoft accounts when they don't have the password is mostly when I have used the SMS codes.