You must log in or register to comment.
I don’t see a claim of it being more private than a username. Perhaps the person you’re arguing with views them as equally private, or is thinking of services that require some form of contact info. I can’t speak for them.
It’s right here:
For 2FA, per-account email addresses and authenticor apps are the best approach for privacy.
I can’t speak for them.
But you just did.