Hacker News new | ask | show | jobs
by Macha 500 days ago
> creating a dedicated email account with no 2fa and email the code there

Of course, that account could also decide to implement mandatory 2FA. Could even be unannounced, just "This login is suspicious, we sent a message to your recovery email to confirm this login"