Comment by kwar13

> So when he asked me to read back a code — supposedly to prove I was still alive — in a moment of panic, I did.

I am not clear how the account access occurred. What code did he read? He voluntarily read his own 2FA code from his Authenticator?