Apps that offer text or Face ID as security are asking for trouble. As soon as someone has your phone, they can read your texts and change the Face ID to theirs…

A better way is to offer a separate PIN (but my guess is most will just use their phone pin 🤦‍♂️) or a physical key 2FA.

I cannot take any app seriously that doesn’t support hardware authenticators