3 ms·

For 1. Those accounts would be set up by customers, so if they didn’t require 2FA, it didn’t happen.