Then you have places like Citibank that disables 2FA periodically to make you “re-authenticate” with your password. And Synchrony (think every credit card not

Then you have places like Citibank that disables 2FA periodically to make you “re-authenticate” with your password. And Synchrony (think every credit card not issued by a retail bank) which gives you a menu of every phone number associated with you from the Transunion skip-trace database to choose from when they request SMS.