The insecurity of SMS is the inability of telcos to secure number porting. If someone wants to compromise your shit, they can easily steal your phone number, if your phone number is sufficiently public

One defence is to have a second service that is only used for authentication, and never share the number except to those providers that need to message you codes