I would like to move away from SMS 2FA (because of Should 2FA over SMS be considered insecure in the wake of recent SS7 attacks? for example).
But some services that provide Authenticator apps actually provide fallbacks mechanisms that go to SMS. For example, LastPass Authenticator gives:
So really, in such a scenario, app 2FA brings no added security to SMS 2FA.
It just brings ease of use I guess, but I'm frustrated to see that. I would prefer to disable 2FA SMS altogether (and rather have backup codes in case of device unavailability). Edit: Just checked, it's possible to do in gmail.
Is there something I miss there, or is it really that sad?