The 10,000 support staff with dubious social engineering training at your service provider are not “something you have”. Case in point literally a few weeks ago https://arstechnica.com/tech-policy/2023/12/verizon-fell-for-fake-search-warrant-gave-victims-phone-data-to-stalker/
Wow would you look at that, still none of them cover what SMS is >:( Almost like it’s not a second factor, and fuck every corporation that tries to claim that it is
“It is not even wrong” - Wolfgang Pauli