True, but as @FLIPSIDE101 wrote, also a login would still be possible with 30-day “remember me” for 2FA still valid…