> The point of having two keys is that there is no need for neither an authenticator app nor SMS I think they are striking a reasonable compromise. I am OK wit

> The point of having two keys is that there is no need for neither an authenticator app nor SMS I think they are striking a reasonable compromise. I am OK with using U2F and having TOTP authenticator as a backup plan. I am definitely NOT OK with requiring SMS for authentication, though, which is unfortunately the direction all the corporate sheep seem to be taking (namely, banks).