2FA that delegates to SMS needs to be illegal and addressed by congress at this point. Whats "actual" happening is you're delegating authentication to another c

2FA that delegates to SMS needs to be illegal and addressed by congress at this point. Whats "actual" happening is you're delegating authentication to another company that performed either a hard credit check the person (the vast majority of us) or has a prepaid (likely the situation above). In both cases, it's delegating of IDV and needs to be outlawed.