What is the inherent issue with 2FA? I see the point about phone-number - that is absolutely valid. But if you could I would like to have a few more details about categorizing 2FA as cancer in general?