I'm still baffled that most Korean banks and government authentication still rely on/allow 2fa through cell phone message... One would expect at least them to follow proper security protocols.