Hey there, am based in Europe, so that may be a fact to be considered.
Yesterday I had extreme time delay with the OTP by SMS or call. You imediately think: Fuck, the OTP code has arrived at a hacker. Some OTPs didn't arrive at all, a SMS arrived 20 minutes later. I' ll switch to authy app now. But in general this makes a customer a bit nervous.
Now that I have authy activated it would be great to have a setting where you can only deactivate 2FA by mobile number but keep authy activated.
You guys are doing a great job, it's really great to see how everything evolves over time!