I said this before years ago about Signal, Robinhood and Coinbase [0] and right now it's 2022 and SMS 2FA is still being used despite SS7 attacks, SIM swapping, one-click zero-day SMS attacks as found in Pegasus and sophisticated SMS phishing attacks. [1]
Really. One needs to think about logging into any service that requires ONLY Phone number 2FA and this should be a wake up call.
Twitter really should get a massive multi-million dollar fine for this breach.