2 users had reactivated their 2FA already on their own, so we have not reverted their 2FA to the previous state.

one of them are me! i thought i enabled it for another account when i saw it on my authenticator app, but i could login without 2fa lmao