And apparently the only way to add 2FA to Mastodon is to use Yet Another(tm) third-party “app”
So that third party - someone unknown to me otherwise- has my phone number *and* all the 2FA transactions I conduct using that app
Why not just send an SMS/text directly to my phone, like my banks and eleventy-dozen other places do
Why drop an app in there at all?