Google, Apple, Meta, Microsoft, and some government agencies are phasing out SMS 2FA. My bank axed it a few years ago. (Though the Verified by Visa service sill uses it, frustratingly.) There will always be lazy / irresponsible admins out there but most will catch up as major tech companies...