> SMS is the only 2FA method that can be easily deployed at scale
No, no, no, no, NO. No it's not. And you have zero proof of this. Its done this way because its the lowest effort to give security theater.
What's the actual method that can be easily deployed at scale then?
What's the theater with sms 2fa? That is more secure than not having it enabled no?