I've complained about how 2 factor authentication has been used for cross device tracking. But new changes in passwordless logins mean that I have rethink this threat and the strategies related to it like 2nd phone numbers.