Sending a one time code by email means that anyone with access to them inbox can both reset the password (first factor) and intercept one time codes ("second" f

Sending a one time code by email means that anyone with access to them inbox can both reset the password (first factor) and intercept one time codes ("second" factor). Using SMS creates an opportunity to dissociate those two situations.