Known Vulnerabilities in Email TFA