@Gargron As far as I can tell, Mastodon doesn't have SMS based 2FA, and as such (given that I don't trust many smartphones, and am waiting for the Linux-based ones such as the Pinephone and Librem 5 to reach a good state), I can't enable 2FA to keep my account safe.
@raspberrybird SMS-based 2FA is more unsafe than TOTP. I'm pretty sure there are desktop apps for TOTP also.