What's required to disable 2FA
Disabling two-factor authentication removes a layer of account protection and is a common account-takeover vector.
Company policy requires the account owner's verified identity before 2FA is disabled — use Flag for review to get identity verified before disabling.