The worst websites are the ones that will let you set up a TOTP only after you’ve given them a phone number and verified it. Like, my phone number doesn’t mean anything. They can’t possibly know that it’s my number and not someone else’s. How’s that supposed to “verify my identity”? Yeah, it’s all just to harvest data, but their story doesn’t even make sense!
The worst websites are the ones that will let you set up a TOTP only after you’ve given them a phone number and verified it. Like, my phone number doesn’t mean anything. They can’t possibly know that it’s my number and not someone else’s. How’s that supposed to “verify my identity”? Yeah, it’s all just to harvest data, but their story doesn’t even make sense!