Why is this article promoting a seriously flawed form of 2 factor auth? SMS based 2fa is easily broken compared to protocols based on a shared secret and invalidated using time or some kind of nonce counter :/

Edit: ah nevermind, it's promoting this as the _only_ factor which is even more idiotic.