They also have SMS as a backup, which they must, because it’s too easy to lose. A phone can be lost or stolen, or the authenticator app might get corrupted or accidentally deleted. And of course, the SMS backup makes it just as vulnerable as an SMS only solution.
1 Like