>Forced SMS based MFA should be used to protect logins
I have now closed three remote banking accounts (i.e. no nearby physical locations), after they began requiring 2FA via SMS [which I do not participate/allow/text].
My most-recent bank is literally down the street from me so I can walk over when 2FA becomes ubiquitous. Such an annoying "feature".
I used to work in a building in SF where the address was either 123 Main St. or 123 Mission St. Someone in sales had an issue giving that address to a cab driver, IIRC. Amusingly, the company did (and still does) ML for fraud detection.
Or that some towns may have... unusual substrings (Scunthorpe, Shitterton, Fingringhoe, and the ever-famous Fucking in Austria, now renamed to Fugging).
-- People will never have a physical mailing address that contains "funny" numbers like "000", "420", "69420", or "80085".