My bank just emailed me to say that because I haven’t used my two factor auth recently (they only require it for specific actions), they’re disabling it on my account.

What kind of a batshit security posture is that?!!

@s0 mine decided to send me 2FA SMS without even asking if the number was still valid.