3 ms·

Apparently the safeguards consist of using a non-SMS method of 2FA. Maybe just do that in the other case too.