> created before that feature Which feature? Unless they didn't ask their user's email (which I'd find surprising), they could have added e-mail based TFA any

> created before that feature Which feature? Unless they didn't ask their user's email (which I'd find surprising), they could have added e-mail based TFA any day without asking their users to do anything.