Last time I checked, Vanguard's implementation is worthless because you can still request an SMS code as an alternate path.
I know it’s not encrypted but has it suddenly become easy to intercept?
There's also SIM-swap attacks that rely on social engineering your carrier.