got into it with a twitchguy stumping hard for 2FA.
pointed out that consistent access to a fixed email and/or phone number and/or smart mobile device is a privilege of both wealth and nationality and most systems expect all three; this is an ill-conceived patch atop fundamentally bad systems and we need to rethink authentication from the ground up (or maybe just eliminate incentives to subvert it, but capitalism and empire will probably take longer to fix).
his retort was that he has ten years experience in cybersecurity and in his expert opinion... "people need to get better at recording their recovery codes."
my dude that is literally writing down your password with extra steps. what are you doing. why are you here.