and coming from a company that doesn't support FIDO2 auth to protect peoples' money, yet insists on SMS 2FA.