An authenticator app running on your phone is an OK-ish middle ground here, but SMS two factor has to be declared dead https://t.co/9zi4hNGO7b