I literally can't order medication at the moment because I need a 2FA from my email; which I pay them for. It seems pretty inexcusable to me (as someone who does a lot of SRE work) that they got bitten twice by the same incident, but I guess I'll wait for the next post-mortem before I decide to switch or not. SLA or not, it's a great way to lose the faith your customers had built up in you.