I am currently planning a 2FA implementation to require users to provide a code via SMS for some actions, like a login. I will also use tools like Google Authenticator, but