... hey PayPal, what is the point of sending me 2FA codes by SMS for transactions, if I can login to my account without a 2FA code and set a new primary phone number *also* without a 2FA code?