Comment by jfernandez

Scary, this just convinced me to turn off text-based 2FA and only have Google Auth App (+ backup keys). Thank you.