Post #942587

Why do some online services allow to use password as secondary verification(along with other 2fa ones) after already using the goddamn password in the first place. Am I missing something here or this is the dumbest shit ever?