Generally companies treat the SMS 2FA as an additional check, so it's a security improvement. But some companies also then allow it to be used for password reco

Generally companies treat the SMS 2FA as an additional check, so it's a security improvement. But some companies also then allow it to be used for password recovery, which is generally a security regression. Also multiple companies have used SMS 2FA numbers for ad targeting. https://news.ycombinator.com/item?id=21197553 https://news.ycombinator.com/item?id=21197553