[philnash]

SMS 2FA is still stronger than no 2FA.

[Spivak]

Sure but SMS 2FA is almost always SMS 1FA with a password that can skip the SMS on saved devices.

SMS 1FA isn’t stronger than a good password or a pw manager but I think it’s fair to say that it’s better than the typical password.

[latchkey]

Recycled phone numbers makes that untrue.