Unfortunately, there are already laws that demand sms auth, e.g. online gambling in some US states (new jersey, being one).

The persevere practice has been established as 'strong login'.