To protect their character, you should use Texting otherwise app-situated 2FA