Why does everyone assume that two factor authentication by mobile means SMS? The SIM card (Subscriber Identity Module) has the features necessary to do it and this is used in Norway to provide 2FA for logging in to banks and state services like tax and health.