2FA setup is a disaster. Also no method other than SMS to get card purchase security codes is crazy. Should have the option of getting them via the app or even email in case of travel where phone is unavailable (but internet is).