Comment by cashewchoo

it's email/sms/phone-based. I consider "real 2fa" to be authenticator-based. Not vulnerable to SIM hijacking.

The email one has different problems (what if my email's hacked too?)