Source: https://mstdn.isometry.group/@Cahatstrophe2/117323121764942610
transcript
@[email protected]: you’ve heard of two factor authentication. you’re heard of three factor authentication. now get ready for just never being able to fucking log in at all

Yes, it’s so slow and cumbersome. Fine as a backup but it also makes security worse if everyone uses email as then access to email gets everything.
Not good as a backup either because once they get in to your sms or email, they now have access to everything