Comment by treflop

I agree that SMS is a terrible multi-factor.

But it caught on because asking people to install an app is a massive ask. Not to mention, people never save those recovery codes.

Sure, you can use Authy and back up your codes but that’s pretty much squarely in the “for technical people” camp.

So at the end of the day, SMS is the only real solution for your average normal person. Let’s get cellular carriers to make SIM swapping harder.