[antiframe]

But the phone number you have is not 100% in your control. I had AT&T flub something and I lost my number and they assigned me a new one (I was chanting my plan just after they did some merging with someone). Granted its unlikely but I would still use defense in depth and not have password reset be my only login method.

[fusslo]

Thats totally fair and really scary since so many services think 2fa means texting or calling a phone number (my bank for example)