Thank you for the response. This is the exact behavior I wish to remove. Signing in with a text message might be okay for a casual games website or social platform, but is grossly inappropriate for websites that collect, store, process, and display extremely sensitive and valuable financial data.
Did you know that SMS Authentication is illegal for banking websites in some countries?
This website does have actual 2FA (code generator app) capability. I had to use it to sign in to write this reply. There is no good reason for me to fall back to text messages. SMS is the weak link in a strong chain; being able to bypass my code generator with a text message is not acceptable security and makes everyone more vulnerable.
