associated with her account my question is if she has 2FA enabled why the email change wasn't required to go through a second factor @Yahoo has this basic security since 2010s I was dumbfounded when I found out discord either doesn't or doesn't by default.