I deliberately created two different Intuit accounts to separate business and personal transactions. Are you suggesting that I also get a second phone number and change my business address (add a suite number?) so I can completely decouple the shared attributes of the accounts so maybe Intuit won't dump me in this rabbit hole in the future? Or are you suggesting I do something else? For the time being it seems simpler to just login to the wrong account and be glad that I have my data on my machine and not in the wrong part of Intuit's cloud.
Shouldn't the fact that I entered an email address at login, received a two factor authentication code on that same email address, and then was logged into an Intuit account using a *different* email address be ringing some alarm bells somewhere?
And what about the fact that I can log into an account without ever entering the password at all? 2 factor authentication is supposed to improve security by requiring that the person logging in both know something (a password) and have something (a device) in order to log in. Apparently all you need to log into an Intuit account is the phone and/or email used to register the account (and maybe not even the email). For an organization that deals with financial data this is incredibly sloppy.
