Birdsite weirdness
Twitter just locked me out of my account, claiming that they’d spotted suspicious activity on my account and needed to confirm I was me.
They did this by asking for my phone number and then sending it an authorisation code. But if I wasn’t me I could have given them any old phone number, so how is that secure?
I can’t see any evidence of suspicious activity.
Also they didn’t have my phone number. I didn’t have TFA set up because I didn’t trust them with my phone number.
That would also be my guess.