Reflecting on the choices available for 2-step verification and reiterating the NCSC guidance.