Sure, I don't disagree, but that seems an entirely different discussion. If it bothers your OCD, replace 2FA tokens with "confirm your email address" or some other thing. If you don't think there are ever any good reasons for sending a customer email, then we'd have to step back and argue that first before we could get to my question in the GP post