I said it's useless if an attacker can get access to a SIM (or hack the SS7 protocol, or whatever). Clearly it's an extra bar for an attacker, no disagreement

I said it's useless if an attacker can get access to a SIM (or hack the SS7 protocol, or whatever). Clearly it's an extra bar for an attacker, no disagreement there.