Also I'm going to have to lie to Facebook & Google when I get the " your account was just logged into from a new device, was it you?"
Why, no it wasn't. Locked.
Same with internet banking and email all use 2fa and dedicated device or my phone now... How do they propose this works?!?