Comment by rando444

SMS 2FA is insecure because companies implement it in a way that it becomes one-factor.

Forgot your password - reset your password - get an SMS

When there is no second factor involved, it's not 2FA despite people calling it that.