I do have quite stringent non-tracking settings enabled in my browsers, and I do get occasional captcha or TOTP request.However, I never got completely denied a login with PayPal.

Many banks are equally employing the same "guessing whether it is you" techniques with their web UIs. Moreover many of them require Google Play Integrity when a phone is the TOTP. Definitely different ergonomics though.