We are prompting users to consider enabling an alternative form of 2FA before that happens. It's not mandatory to use 2FA for the majority of accounts, so we are not forcing this. However, most businesses require 2FA as a standard practice.
(2) Users and businesses who have not seen the prompt will be required to actively unenroll themselves from the text message 2FA method. These accounts will still be able to log-in, but they will be immediately prompted to complete the task. This will ensure users and businesses who haven't seen the in-app prompt do not have 2FA disabled without their awareness. | 
