Fallbacks can be layered. For a company that claims go all-out for its consumers privacy, using SMS as the default fallback in the 21st century is pretty sus.