People are advised to allow 2FA just after subscription to minimize the risk of unauthorised access