It depends entirely on the implementation. Is it genuinely a "second factor"? Or are they just going to let you use one or the other? Because MFA is a real benefit to account security, even if SMS is the weakest version of it.