That's the comment I was looking for.

To be fair, we are in a specific community...

Why would you even log into a public device?

1337 h@xing the internets

https://www.nbcnews.com/news/us-news/actor-timothy-busfield-indicted-child-sex-abuse-charges-new-mexico-gra-rcna257502

Goat...

Maybe that's the name he uses so people think he is called timothy! And it wasn't a sprint store! Classic misdirects

It's like when people think VPNs will magically prevent their credentials from leaking while they're giving them to some sketchy website

What, how'd you get my IP! You haxxor!?

Phone carrier.

They have display phones and tablets.

And some people use those display units for social media for some reason.

Back in the 2010s I had a friend work in stores as a "device expert", he handled daily resets of the display units (this was pre-MDM easy management days). The number of people who just logged on to Twitter, Facebook Messenger, even WhatsApp or GRINDR of all things (yes, dude left his grindr account logged in, full of explicit images, which downloaded to the device's gallery, while the phones were most often used by KIDS in the store...), it was simply astonishing.

Sprint is was a phone carrier in North America (pretty sure just the US, but they may have been in Canadia, too)

[citation needed] on the second half

Goated sounds disgusting.

Do you blame the locksmith if you lose your keys?

I could take the locks off the door to my house but then I can’t be mad when I get robbed

Edit: I hope that the lesson learned is about needing to have multiple forms of MFA and a safe location for back up codes, like you would have multiple sets of keys and maybe a key box hidden in a safe place. Not blaming you for not realizing it at the time, it’s not something one would think about until it’s too late. It’s not like we had our parents to teach us about MFA best practices like you might have for house keys

You didn't print out or write down the codes they give you for this exact situation? 100% your fault and not 2FA's

This makes me mad but I have absolutely no justification. Like, it's your life. But I am incensed. Godspeed.

He says having never dealt with having his identity stolen.

Use a Yubikey. It's a small USB Device you can put on a keychain. It is still a second device, but it's not your phone. And you always have your keys with you, anyway.

Why do you think you need to connect your phone to your computer?

You do know you can just generate codes and neither device will know of the others existence, right?

MFA (a better term IMO for this) has nothing to go with phones, per se.

It's just about reducing risk by adding more proofs that the person claiming to have the right to do something has indeed the right to do something.

Unless you have excellent password hygiene (long, random, different for every single site and service) the likelihood of having an account taken over goes up quite fast. The overwhelming majority of the population doesn't, so forcing a second factor is a good way to limit damage.

If you don'tt like the multi step process, look at psskeys. They aren't perfect, but they offer nearly all the security benefits of MFA without having to go throughthrough multiple steps.