No one should rely on SMS for 2FA! Phone numbers are bad authentication tokens (they can change hands, be diverted etc). Proper 2FA should either be TOTP code

No one should rely on SMS for 2FA! Phone numbers are bad authentication tokens (they can change hands, be diverted etc). Proper 2FA should either be TOTP codes and apps for those or hardware tokens. Any of these should also have backup codes.