First of all, note that "Security" is not an option in the Category dropdown for composing messages on this forum.

Now to the topic of 2FA. Cursory browsing in security forums will reveal that both SMS and Passkeys are quite problematic. SMS is subject to SIM hacking, and Passkeys... well just do a Google search for "the problem with passkeys" for some interesting reading.

Currently the most secure and portable 2FA method is TOTP, so it's rather surprising that WA isn't implementing it. I hope WA implements TOTP in the very near future.