“Someone decided our current authentication wasn’t trusted enough so we’re adding 2FA to this system. We now need to you give us information we didn’t already have over this untrusted mechanism, which we will then trust because it’s convenient for us.”