Hi
It's great that there's now 2FA to protect our EE accounts.
However, my feedback is that it is very limited.
For example, it is SMS only which makes it vulnerable to SIM swapping (ironic for a mobile provider).
There should be an option for an OTP compatible with Google Authenticator, so if your phone is offline and you need to check your account then you can still login. e.g. lost SIM PIN and you need a PUK (Personal Unblocking Key) from your account.
In addition, there should be the option of backup codes that you can save/print to get in as well. Enforcing people to use a single phone number for the second factor (with no option to disable) is far too limiting in this day and age.
