Why do you think sms "2fa" is suddenly so popular with banks and other fintechs, despite things like passkeys and u2f, you know things that _actually_ prevent people from breaking into accounts, have existed forever?
It's popular because it solves the problem (not ALL problems, but the one they're trying to solve) and it's easy and low-barrier to implement and use.