This question already has an answer here:
A bank offers two factor authentication in two forms. The first is SMS to a registered phone number (registration done at bank branch). The second is a provided hardware token.
Both options are provided for every login (you don't have a choice), upon successful authentication using password.
What benefits (if any) are there of a valid user consistently choosing the hardware token option at the login screen? Note that an attacker with the correct password can always trigger the SMS option.
Note to comments: I do know that SMS is "weaker" than a hardware token for 2FA implementation.