SMS 2FA isn’t secure, but what about a small retail/delivery business that uses SMS as the only means of authentication?

Payment is not done over SMS but separately through cash or Venmo, so it seems like the worst that could happen is a delivery gets nefariously ordered for someone who didn’t want it.