No, #PayPal, if I set up two-factor authentication, it wasn't so that you give me the choice between using a token or sending it by SMS to my number!
It was precisely so that who has access to my phone number (rather than my phone itself) would be irrelevant!
#security #fail #2FA