Update: I looked at various settings, and found an account Ana Petrovic listed as Payment Account Admin. I have removed it now and set 2FA requirement for all the changes.