There&#x27;s no reason to assume he wasn&#x27;t using 2FA. The title says &quot;backdoor&quot; and that&#x27;s the point: they didn&#x27;t verify identity... they asked for name, email and a <i>nearby</i> address.