> ... had successfully changed the password, but in the case below, failed to access the account due to the second-factor authentication... Why wasn't two fact

> ... had successfully changed the password, but in the case below, failed to access the account due to the second-factor authentication... Why wasn't two factor authentication required to reset the password? This is Security 101: Greater risks need greater authentication.