@neil Absolutely. My experience supporting "ordinary" users is that it's a lot more common for people to "lose" their #authenticator app than to lose access to their phone number, which is why #SMS is still the pragmatic king of #2FA.
On a related note: it can of course be tricky to convince people of the need for 2FA. Consequently, I've started enabling it for Google and Microsoft accounts as part of routine checkups with my customers, explaining it only vaguely as "an upgrade to make you much safer". I'm interested in people's thoughts on this. #ComputerSupport #ethics. I only do it if I'm able to print the recovery code(s) there and then. My customer base is predominantly older people who are very used to keeping pieces of paper safe.