If compromising a cell phone number alone is enough to steal funds, then it wasn't 2-factor authentication, it was 1-factor authentication. Unfortunately, many

If compromising a cell phone number alone is enough to steal funds, then it wasn't 2-factor authentication, it was 1-factor authentication. Unfortunately, many institutions are bad at computer security and designing authentication systems.