I agree. I have 2-factor with authenticator app enabled, and this one-time code completely bypasses that security mechanism! So if someone hacked a sim card, they would have insta-access to my account. I'm removing all of my accounts from paypal.
... View more