Huh. I thought the "article" would be about how too many platforms/systems send 2FA auth codes via email (or allow the option) and not SMS. Email is easily accessible anywhere, it doesn't truly fulfill "having something" like having a "phone" (yes, I know SMS codes are sent to a phone number which can also be forwarded) so if someone has hacked my email and has access to my email then your 2FA is crap. (Yes, I know 2FA shouldn't be used over SMS either, but it's better than nothing, no?)