I would know something was up as soon as they didn't ask for my 2FA.

Everyone should have some form of 2 factor authentication enabled. This is money we are taking about here. Great job pointing this out and keeping people safe man.