While SMS has been known to be the worst of all the 2FA methods, something is better than nothing. Some people will not have hardware keys (passkeys). Or will

While SMS has been known to be the worst of all the 2FA methods, something is better than nothing. Some people will not have hardware keys (passkeys). Or will not have the app. Deprioritizing the SMS factor and labeling it as a less secure method to the user would be best imo.