Why I Stopped Mocking 2FA in Tests (And What I Do Instead)

I mocked OTP verification for two years. Then a bug hit production that my test suite should have...