I'm not surprised. I input a 2FA time-based code with a 30 second refresh on it and by the time I got through the captchas, my code had expired. By ~1.5 minutes...