Email 2-FA is a catastrophic mess. The provided code in the mail is always rejected with error, also the direct link with the same code in url parameter fails 3 times out of 4. The submit code button is invisible, really wtf. Securing account seems the best way to get forever locked out of it. I'm disabling this immediately. And you dare to push on us that cr-app that can't install on my not so old phone to force that authenticator that might have even worse problems. Big fat NO.