i mean it’s not much different it’s just email code/link vs an all generating a code but 2fa is unphishable as well