Two-factor is not enabled. An enrolment was started but never confirmed, so it is not protecting anything yet. Set it up — a minute, and you will need your phone.
STOCTIONSASX ETO desk
This app can write trades and rebuild the ledger, so it is closed by default — an unconfigured install grants nothing rather than letting everyone in.