EDIT: You know, after some time to cool off, Google Authenticator 2FA can still be enabled and isn’t being phased out like the less secure SMS 2FA, so it’s really not the end of the world here. The chance of permanent lockout is avoided, even if the whole Google Prompt system is still wack.
usually u gotta ask them to do it, but yea. dunno about required but I’ve never had issues
It’s been a minute, but I think some federal agency made a rule about it a few years back.