Hacker News Reader

Logging into new devices does not ask for a second factor. I’ve verified this last week when I got a new iPad.

It requires you to trust your new iPad from another device, in addition to the password. That's 2FA.