Bind non local logins to certain devices?

Been a long time Home Assistant spectating fan, finally took a dive recently and set one up and just flabbergasted at how awesome this is.

Anyway, I just enabled the Cloudflare addon and it’s amazing to be able to access home assistant through my internet with CGNAT. However, now that I’m exposed, I’ll be forever concerned about password leaks even if I have some rando generated one. Is there a way for me to ensure non local logins can only be logged in from a particular device (ie, my phone). So someone can’t just take my password and login from their browser?