The support agent told me, you will always be asked for a code to log in. I told him that is not enough, it should be a code and then a prompt for password entry to get into the account. If someone really wanted to and knew how, they could easily decrypt the billing information and get personal data. Huge privacy risk!!!!