Agreed that such services should stop using phone numbers. In the meantime, you can get inexpensive numbers from https://jmp.chat/ - useful for 2FA as well.
It's two passwords, both are something you have to know, there's nothing you need to have or be (sms and biometrics respectively)
But if you can access the phone content remotely behind a password, then it stops being 2FA.