After creating a Twitch account, I'm completely baffled by the lack of interest from Twitch in this issue. I'm sure a lot of people can't or won't want to supply their phone number for privacy reasons, and this causes them to be unable to fully secure their account. Especially in 2024, where TOTP *without* SMS is the default (and SMS 2FA is inherently insecure), it's insane to think a platform as big as Twitch just doesn't care about the security of the accounts of users on its platform.
Twitch, if you're reading this: it's time to wake up and take action before it's too late and you'll be forced into putting out fires with a PR nightmare and lasting distrust by the very users you don't seem to care about protecting.
After creating a Twitch account, I'm completely baffled by the lack of interest from Twitch in this issue. I'm sure a lot of people can't or won't want to supply their phone number for privacy reasons, and this causes them to be unable to fully secure their account. Especially in 2024, where TOTP *without* SMS is the default (and SMS 2FA is inherently insecure), it's insane to think a platform as big as Twitch just doesn't care about the security of the accounts of users on its platform.
Twitch, if you're reading this: it's time to wake up and take action before it's too late and you'll be forced into putting out fires with a PR nightmare and lasting distrust by the very users you don't seem to care about protecting.