Comment by exabrial

"SMS is not 2FA" x10000. Using it as a Second Factor needs to be regulated by law at this point.

Use a U2F or WebAuthn hardware key + backup codes printed somewhere on actual paper.