If your argument is that vendors should use email for 2FA and password resets instead of SMS then how do you propose Google allow typical users to recover their Gmail password