This is why you should have at least two MFA options enabled.