This is a neat and useful trick, and I will be borrowing it. Thanks!

AFAIK rooting an Android phone necessitates a factory reset of the phone beforehand, so I don't think you'd be able to dump the MFA seeds before Authy is uninstalled (unless that's a hardware thing)

That was never the case back when I was rooting phones. Sometimes the phone would reboot immediately after getting root so that you could do something useful like installing recovery, but maybe something has changed.

Jokes aside, this would be trivial to detect with nmap, right? The SSH banner prints anyways.