Yeah, this is something many people seem to not understand.

SMS is not secure. The best option is something with FIDO2 or similar.