Comment by poglet

Enforcing MFA or registering with phone numbers wasn't required on email accounts back in the day.