@briankrebs thanks for clarification! I tried to replicate this beforehand, but in my case it asks for password, phone number, auth or recovery code. If it works without any of these then it's highly disturbing.
https://infosec.exchange/@obivan/113675152822410250
No replies.
────
────