My bank just emailed me to say that because I haven’t used my two factor auth recently (they only require it for specific actions), they’re disabling it on my account.

What kind of a batshit security posture is that?!!

@s0 This seems like the logic where they realised 2FA is a lost cause for an average non-technical person and they try to pre-emptively solve all the login issue tickets by applying a fix like this.