[gnabgib]

Your github is 404 (maybe it's private?)

You don't explain how SMS works, via which provider (is it also a shared pool of numbers? Many virtual providers are flagged for MFA via such numbers)

Your privacy policy says you harvest/store 100% of all data that travels over your services including PII.. perhaps you could call this out more specifically. (IP addresses are PII in many jurisdictions, most people run agents on their home network)

You seem to assume the cost of running mail and routing infrastructure is $0 (only talk about $10/yr domain cost).