True, but at least you need an SMS-capable number only once (to sign up), and not every time you are trying to authenticate to some "secure" website.