Securing SMS sender ID may prevent you trusting a URL from a text, but that's not enough. We can't prevent people from ever clicking on a phony URL, so we need

Securing SMS sender ID may prevent you trusting a URL from a text, but that's not enough. We can't prevent people from ever clicking on a phony URL, so we need to ensure even if you hit a phishing page that you can't have credentials stolen. SMS and TOTP can't do this, even with if they are secured, because phishing pages can forward the credential. The only solid way to prevent phishing is non-forwardable credentials, ie FIDO/U2F. We need to make this easier and more ubiquitous.