Now that I have read the screenshot from the first post a little better it doesn't say they will access your device.
It says they will assess your device.
They are two very different things.
They will assess information about the device.
I would say things such as model, software versions, location, network provider etc.
Say you live in New York and all your authentications come your iPhone and you suddenly start authenticating from a Samsung in California that's gonna raise a flag for potential fraudulent activity.