>> ...thieves can intercept that one-time code by tricking your mobile provider into either swapping your mobile device’s SIM card or “porting” your mobile number to a different device.

> Has this ever actually happened?

Yes. For example: https://krebsonsecurity.com/2018/05/t-mobile-employee-made-u...