Because, over the last five or ten years, MFA has been adopted as a best practice and it’s easier to check the box with SMS than to get all your users to instal

Because, over the last five or ten years, MFA has been adopted as a best practice and it’s easier to check the box with SMS than to get all your users to install a TOTP app. (another example of “Best Practices” being actively harmful: people should use passkeys now)