[BrenBarn]

This is why all the claims by tech companies that "you need to upgrade/enable 2FA/do whatever for security reasons" are utter hogwash. There's no actual concern for security, just for control over users.