Interesting, so adding 2FA actually decreased security... Well shit. Interesting case that shows just how unpredictable such things can be. As far as I underst

Interesting, so adding 2FA actually decreased security... Well shit. Interesting case that shows just how unpredictable such things can be. As far as I understand, though, 2FA increased the attack surface in this case. A web interface itself still remains impenetrable, doesn't it (know your hard-to-guess password and you should be fine)? Mobile provider was the weakest link and any system is as secure as its weakest link.