Cracking a good password - which a large percentage of people don’t have or will readily input in any phishing web form without a second thought. Time-constrai

Cracking a good password - which a large percentage of people don’t have or will readily input in any phishing web form without a second thought. Time-constrained 2FA codes can be broken with sim swaps or targeted phishing which are less widespread than a wide-net spam-based phishing campaign. Now don’t get me wrong I hate SMS 2FA with a passion but still :)