That’s still gaining access through a device that’s already signed in/has your password db.

If you do not have access to a device that’s already signed into your accounts/has a copy of your password db; how do get in?

Presumably you’re smart enough to not have password only auth on a public facing nextcloud instance if it stores your password db…

This is the scenario we are discussing. The fact you store you db on other devices is entirely irrelevant.