SMS has problems, it's true. But every MFA method for consumers has issues, and for some applications it is a viable solution.

I wrote more about that here: https://ciamweekly.substack.com/p/ciam-mfa