No?
How do you change your 2FA? Buy a new phone? A new Yubikey?
I agree that rotating 2FA should ring alarm bells as an unusual request. But that requires thinking.
No?
How do you change your 2FA? Buy a new phone? A new Yubikey?