This is why I don’t mess with Apple’s 2FA/whatever.

Link. They are not good at this stuff. I don’t intend to risk their 2FA until 2018.