NirodhaAvidya

“At this scale, downstream risks include account takeovers, targeted phishing, credit fraud, SIM swaps, and long-tail privacy harms. Industry-wide, the case underlines how third-party identity vendors have become critical infrastructure and can become single points of catastrophic failure,” our team explained."

Wouldn’t Username + Password + SIM = 2FA password reset?

God Damned, that is pure fucking evil. Like, I can’t even… Just literal evil.

How’s this compare to Obsidian or Joplin?

Seconded. If true, my paranoia will be justified and prove to be woefully insufficient.