A user enters a password and a code from a hardware authenticator. Why can this strengthen authentication?

1. It combines different authentication factors
2. It duplicates the same knowledge factor
3. It eliminates phishing risk completely
4. It authorizes every requested operation