For anyone else who was wondering why SMS is insecure for 2FA:

https://www.theverge.com/2017/9/18/16328172/sms-two-factor-a...