Mandatory two factor authentication via text is annoying, and famously insecure, either copy what coinbase does, or leave an option to disable it. Also not allowing money requests without a phone number is just kinda dumb