The real reason is that they want to save money on the text messages (outside of the US they need to pay $0.05 each time), not because they actually care about user security.

Like when xitter ran out of money and didn't pay their sms bills and people were locked out of their accounts