push notification MFA where you just tap "approve" trains…
push notification MFA where you just tap "approve" trains users to approve. attackers spam you at 3am until you tap it to make it stop. this is MFA fatigue and it is why number matching and passkeys exist. SMS 2FA is better than nothing and worse than everything else