subtext , 10 months ago

Is it less secure than it could be? Yes.

Is it better than no 2FA? Also yes.

In the end if it doesn’t work for your security model, than more power to you. But if it helps to increase the security of the average Joe, it’s good advice.