Which statement$/$s regarding root users and IAM users is$/$are true?

Question $1$ options:

The root user is too powerful and its use should be minimized.

IAM users have no access to the AWS Billing and Cost Management console, which helps reduce mistakes that affect a company's overall AWS expenditures.

MFA options don't include SMS codes because these can be eavesdropped and spoofed.

The root user is only for the console and lacks access to certain AWS features.