@etp@indieweb.social SMS for 2FA is not to be trusted for anything important. I am forced to use it for some things but, happily, nothing consequential. Stories of diversion by social engineering or inside job attacks on telecom providers are legion. (Darknet Diaries podcast e.g.) However, if you don't have a crypto wallet you'll likely avoid getting spearfished. 😀