More places really really need to use [essentially] unphishable 2fa (security keys) and make that the sole method of 2fa except maybe in a break-glass case. bu

More places really really need to use [essentially] unphishable 2fa (security keys) and make that the sole method of 2fa except maybe in a break-glass case. but even them, you can have multiple security keys including backup ones