I don't like Coinbase, but it's good that they are disabling SMS auth for this too.
Reply on news.ycombinator.com