That's a policy issue, not specific to SMS; it's no different than getting someone to reset your password over the phone with poor ID validation. SMS 2FA is sh

That's a policy issue, not specific to SMS; it's no different than getting someone to reset your password over the phone with poor ID validation. SMS 2FA is shitty for unrelated reasons.