content: People have had their phone numbers moved to a new device/carrier (without their consent or the original company having any way to freeze a number to prevent this exact shit, a major weak point in a "secure" way of authenticating somebody) or had their number cloned. 2FA authentication is nearly worthless with how easy a determined person can sidestep it.   Not only that, but it's easy to access most carriers text messages on their web sites now.  All you need is a phone number and a password.  And if you already know what password they're likely to use...    Lots of companies will use this as an excuse to deny any kind of protection to you if your accounts get broken into.  "Your text messages are accessible form the internet so we won't guarantee 2fa"  Coinbase is notorious for that, for example.