USM repurposed an old subscription email system for their 2FA, and if you had opted-out of the advertising before, well you don't get 2FA codes then. I spent a few days figuring this out with support. They removed 2FA from my account and explained the situation. A year later, I re-enabled 2FA, because SURELY they'd have fixed it by now, right? This was ~3 and 2 years ago, respectively.
I'm still locked out of the account because they never fixed it. If that's how they handle their systems, I want no fucking part of it. Can't pay me enough to put a number I care about under their control.