It's not "2-Factor Authentication" if you're sending me an email with the code in it, which I then look at on the same computer where I'm trying to log in.

That's just sparkling #security theater.