From the past few months I'm collecting all resources on the use of SMS as a 2FA: https://github.com/kdeldycke/awesome-iam#sms-based-authentic...

TL;DR: don't.