I'm willing to pay a 0.25% management fee to prevent SIM swapping attacks. Vanguard will not allow you to remove SMS as a 2FA option, and their Yubikey authentication doesn't work with Firefox, which is pretty unique. The little millennial brokerages (Robinhood, Wealthfront, Betterment) are all more secure.