For some reason you don't need your 2fa code to disable 2fa