[narcissismo]

Agreed that the problem looks like 'fail open', but there is the additional possibility that they had no plan for this failure mode at all beyond timing out.

In that context, and with folks with no regard for consequences in charge, an emergency decision to allow everything seems plausible.

[jimmydorry]

That seems the most likely scenario. This was their make or break opportunity. They should have disabled password resets as soon as twillio deplatformed them.