"it really depends!!" on the level of security required for the data/actions that seat behind the authentication - for e.g. for Banking and Financial services - a 2factor auth is a must.
For average usage, mobile based auth is ok - although in that case you are relying on the security infrastructure of telecom operator, which in many country is not that good - e.g. identity theft to hijack someone mobile number is quite common.
The best feedback can come in from developers who are working on MicroServices, K8, CICD frameworks. Also, if developers are spending more time in coordinating with DevOps instead of focusing on what the love to do - #Code.
If you try out - then don't forget to write a feedback/review - either here or on github issues - will help in out in planning further improvements.