I've noticed that several websites where I've been happily using 2FA with them sending me an SMS message for years seem to want me to switch to using an authenticator app instead.
Is that really more secure? How? And if so, is that level of security realistically needed for anything a normal person might do except banking?