← Back to context

Comment by deepsun

8 hours ago

I'm sure Google prompted author for years begging to turn the 2FA on, as well as warning that they will enforce it on day X. Author ignored them all.

Why is 2FA so critical it’s worth proactively breaking the user? What’s the even more bad thing that would (not could) happen to the user if 2FA was not enabled?

  • Password database leaks turning into spam/proxy farms of very well aged accounts.