[tadamcz]

Using a security key instead of TOTP would have prevented this.