doc: remove mention of SMS 2FA

PR-URL: https://github.com/nodejs/node/pull/60707
Refs: https://github.com/nodejs/admin/issues/1005
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Filip Skokan <panva.ip@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Richard Lau <richard.lau@ibm.com>
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com>

onboarding.md

@@ -8,8 +8,8 @@ onboarding session.
 * If the new Collaborator is not yet a member of the nodejs GitHub organization,
   confirm that they are using [two-factor authentication][]. It will not be
   possible to add them to the organization if they are not using two-factor
-  authentication. If they cannot receive SMS messages from GitHub, try
-  [using a TOTP mobile app][].
+  authentication. Ask them to use secure two-factor methods: authenticator apps,
+  passkeys, security keys, and/or the GitHub mobile app.
 * Suggest the new Collaborator install [`@node-core/utils`][] and
   [set up the credentials][] for it.
 
@@ -303,5 +303,4 @@ needs to be pointed out separately during the onboarding.
 [set up the credentials]: https://github.com/nodejs/node-core-utils#setting-up-github-credentials
 [static-analysis]: doc/contributing/static-analysis.md
 [two-factor authentication]: https://help.github.com/articles/securing-your-account-with-two-factor-authentication-2fa/
-[using a TOTP mobile app]: https://help.github.com/articles/configuring-two-factor-authentication-via-a-totp-mobile-app/
 [who-to-cc]: doc/contributing/collaborator-guide.md#who-to-cc-in-the-issue-tracker