The worst part is: why are they sending me an SMS when I never configured that as an MFA option?