[BrandoElFollito]

Exactly this. Some vendors such as Amazon have agreements with SWIFT providers to bypass 2FA.

This comes with extra liability but this is part of their risk and costs.