Microsoft is scrapping SMS 2-factor authentication because it's "a leading source of fraud"

It wants to move towards no passwords whatsoever.