Is the need for 2-step auth for account changes a documented feature? I'm asking because I couldn't find anything pointing to that and, if so, it could solve my

Is the need for 2-step auth for account changes a documented feature? I'm asking because I couldn't find anything pointing to that and, if so, it could solve my initial problem.