[thenickdude]

2FA bypass bugs on websites are common, e.g. this PayPal bypass that stemmed from them allowing their own app through without 2FA, since their app didn't support 2FA at the time:

https://duo.com/blog/duo-security-researchers-uncover-bypass...