That's also not true, two factor works before putting in a credit card, as I've said in a related post. I completed an email based two factor request when I did my test and I still have not given them a credit card.