Disabling 2FA should require a 2FA code
Currently 2FA can just be disabled without a code confirmation. Common security practice dictates a requirement of at least one code (sometimes two consequential codes) to disable 2FA.
Do not update/delete: Banner broadcast message test data
Do not update/delete: Notification broadcast message test data
Currently 2FA can just be disabled without a code confirmation. Common security practice dictates a requirement of at least one code (sometimes two consequential codes) to disable 2FA.