It doesn't require a mobile phone. A client on your desktop can handle the authentication.
There's also a mechanism[1] to change your master key should it become compromised. Looks like a huge drawback is that it requires you to store an offline "Identity Unlock Key" somewhere.
