And only enabled if 2FA is enabled. It won't work without (as won't many Apple services).