A big feature of sms is that it’s not encrypted. Every tower that recieves the message is trusted to forward it unaltered. This is one attack avenue.

www.helpnetsecurity.com/2020/11/…/sms-voice-mfa/

Things like the following are generally recommended though Microsoft recommends using their app. www.yubico.com