>>>and that doesn't scale except for high value targets Real-world activities (kidnapping, rubber hose, fingerprint stealing, whatever) aren't worth it for med

>>>and that doesn't scale except for high value targets Real-world activities (kidnapping, rubber hose, fingerprint stealing, whatever) aren't worth it for medium-value targets, true - but my point is that SIM swaps aren't either - for low-value targets. From the article, they're offering $300 per - so the expected value from these specific compromised accounts must be more than that (I'd guess $1k min). This makes it pretty clear that if you're protecting accounts worth ~$50, SMS is probably "good enough". And for some users that's the right trade off.