Far too many of the critical services (banks) still only offer SMS 2FA.

For most of them. It's a tool, but not a silver bullet