The simple fact is that I don't own my mobile number; the mobile operator does. As such I should not use it as 2fa.
https://blog.kraken.com/post/219/security-advisory-mobile-ph...