GitHub: SMS and TOTP can now both be registered 2FA methods

If the point is to increase security, isn't it counterintuitive to allow SMS?