Best way to secure authenticator app itself?

You also could use yubikey or something like it