"Authenticator apps, biometrics and security keys are harder to steal because they’re tied to a specific device or person, not a phone number or inbox that can be hijacked. Most real-world account ...