It also has the line "by sending a code by text message to your phone, for example, which only you would have access to." when talking about what 2FA is. It's t

It also has the line "by sending a code by text message to your phone, for example, which only you would have access to." when talking about what 2FA is. It's true that that's used in practice, but it's utterly false that "only you would have access" to text messages sent to your phone number. Or that a text sent to your phone number must go to your phone (SS7 vulnerabilities, porting attacks, etc.) There are many good reasons NIST recommends not using SMS for authentication.