Full threadlozenge·The best defence seems to be to configure your 2FA app to require biometrics. I'm not sure why they didn't mention this option.View on HN