Always use app based 2FA whenever possible. SMS 2FA is a security vulnerability, not a benefit, imo.

I use OTP auth and really like it