That’s all fine except SMS is the defacto method that most use for password resets, dual-factor, etc. This was mentioned in TFA.

What does one do about that?

I think it would be amazing if banks and financial institutions used iMessage but I can’t see it happen.