Hacker News Reader

When they request it, they should receive pushback. SMS 2FA is a bad business decision with potentially severe consequences for customers.

"We recommended you went for X and listed SMS security problems as the reasons - here is the email chain"

You need to cover your ass, but you don't want to actively push back and risk losing the sale.