Yeah I wish it didn't use SMS. But using an authenticator app can be slow and defeats the purpose of this. I am not a security expert, but from a UX point of view is it perhaps better if the user had to install a stripe mobile app, and gets a prompt to accept or decline?
