> Email is hardly beter than sms, and we do password resets over email. Email is certainly far more secure. Consider the steps an attacker would need to do to

> Email is hardly beter than sms, and we do password resets over email. Email is certainly far more secure. Consider the steps an attacker would need to do to be able to intercept an email being sent from the service being accessed (say, your bank) to your email server provider.