Some of the financial institutions where I have accounts don't allow any other 2FA method than email or SMS text. But I could delete one.
- I get spam calls on the phone, so I know my phone number is public.
- On the email account I use for banking, so far no spam emails, although that could happen in the future.
