> Amazon requiring 2FA on deliveries.

That's probably not about information security, it's simply Amazon not trusting the gig economy delivery worker enough with an expensive package, so they give you a number only you know and he doesn't, and that's how they verify that he has to interact with you before marking the delivery as done. It's to prevent a common kind of theft.

(I'm not talking out of any inside knowledge on the process, just thought that'd be the reason)