Comment by theplumber

>>> Two-Factor Authentication (in particular: receiving a text message or email with a one-time code), and later came the more robust system of Time-Based One-Time Passwords (TOTP) – in common parlance, “authenticator apps.”

I stopped reading after that. Obviously this guy doesn’t know what he is talking about or why that sms and otp are just worthless more or less if you care about security. They are actually loopholes in security. If you can use passkeys you would want to make sure that your stupid service provider(I.e Google, bank etc) is not being stupid to fallback to otp or sms crap.