This is a situation in which self-regulation does obviously not work, and we are in dire need of legislation. 2FA schemes must always support TOTP. Potentiall

This is a situation in which self-regulation does obviously not work, and we are in dire need of legislation. 2FA schemes must always support TOTP. Potentially, as an alternative, 2FA must not rely on SMS, as it is not secure.