Disabling Google 2FA doesn't need 2FA if you're already logged in
Disabling Google 2FA doesn't need 2FA <i>if you're already logged in</i>.<p>The author's core issue is that once a machine has logged in, it is considered trusted for a period of time. Google should probably make this configurable for particularly security-conscious users (assuming it isn't already), but it strikes me as a perfectly reasonable default.