> This means at any point between the sender and your phone anyone who has access can know what your "two factor" code is. and they don't have your account cre

> This means at any point between the sender and your phone anyone who has access can know what your "two factor" code is. and they don't have your account credentials, that's the other half of the two factor approach