Everyone I know who works in security has seen Some Stuff. But I've never seen a website that told users you must remove two-factor authentication.

@mshelton

I'm no fan, but if you are bleeding money, and SMS 2FA is costing you, telling people to move to a different 2FA doesn't seem so terrible.

<please don't shout at me>

@mkarliner @mshelton That is pretty incoherent. On the one hand, it would make sense if they were removing it altogether because some people feel that SMS two factor is insecure. But since they are continuing to let paying users use it, that isn't the reason. If anything this makes it seem more like they are desperately trying to find reasons that people should get a paid account. It isn't going to happen for most. Just give up Elon.