[dwaite]

I have an account holder account which uses SMS 2FA - not ideal, but just fine.

2FA is a benefit for the site, not the user - I'm fine with them having a lousy and costly 2FA system.