This is exactly why I've been preaching the importance of using more secure 2FA methods for years. Still waiting for a foolproof solution...