Once you add the "reset password using phone number" feature, as many sites do, you go from multi-factor to SINGLE factor for MANY websites. And that's a facto

Once you add the "reset password using phone number" feature, as many sites do, you go from multi-factor to SINGLE factor for MANY websites. And that's a factor you don't have complete control over and once you lose, you lose forever. The best part? Right, you can lose your phone number if you lose your phone, because T-Mobile allows one to reset their account via SMS. You can lose your phone number if you misstep just once. My mom got one of those scam calls from people pretending to be customer service. They asked her to read off the numbers from an SMS to verify her identity, and she did. She got lucky because the account is in my name. Otherwise, the scammers would have had complete control over all lines. They'd have transferred it to themselves, amd used that to take over ALL other accounts. And that has happened many thousands of times: https://motherboard.vice.com/en_us/article/gy8bxy/t-mobile-text-warning-phone-hijacking-number-port-out-scam https://motherboard.vice.com/en_us/article/gy8bxy/t-mobile-t...