3 ms·It is much worse, if attacker can use the SMS to bypass the password entirely and own the account.by jjav 6y agoIt is much worse, if attacker can use the SMS to bypass the password entirely and own the account.