2FA is a mess [theverge.com]Yep, not all 2FA methods are equal. SMS/email are more vulnerable.
Searching