i just cannot imagine how not having 2fa makes sense - we also get recovery codes and that should be used - but you can social engineer your way. strong password also can be reset if they know your email and/or phone number. its just - a shit show @bdlowery