Are you talking about the OTP delivered via unencrypted SMS? Surely Apple knows how to set up a link with a barebones encryption better than SMS’