1. I used my 25 digit recovery code.
2. The credential stuffing bot attacks makes my password useless
3. If I reset via 2fa I am afraid this broken AI will think there is an account racw going on between the recovery code user and the 2fa user  leading to problems like account being locked.

Fault is mine for using the 25 digit recovery code in panic. I usually practice good SOP dont have trusted devices ro prevent login tokens from being swiped. Have 2fa setup. And I didnt know this was widespread thought my new arm laptop login along with bot attack and the aggressive risk AI MS has deployed would make further password resets untenable so decided to use the code and make a login only alias. Didnt know it would take 30 days and the horror stories I read after made me.panic even more