3 ms·That’s the whole point of my second paragraph. SMS 2FA is fine, but SMS recovery masquerading as 2FA is not.by mikeash 8y agoThat’s the whole point of my second paragraph. SMS 2FA is fine, but SMS recovery masquerading as 2FA is not.