To be clear, I don't consider it to be bad for primarily security reasons, I consider it to be bad because it's inconvenient when it's the only option and forced. I would always prefer TOTP or a push based system such as WhatsApp or telegram or similar. SMS can be slow, and uses an application I don't open for any other purpose.