Known devices, low risk
With standard login, using only a password increases risk; adding a verification code here prevents others from easily accessing
In Dhaka, many users change phones frequently, so 2FA helps because unfamiliar access on new devices is blocked
