If you log in only by the code or magic link, it's not 2FA because there's only one factor