arrgh but because Twitter is insane, removing your phone number ALSO disables hardware security key two factor auth https://t.co/yx6khIk3iE