I've used Box since 2016 for personal document backup. Nothing too crazy, less than 100MB of data no one but me cares about. Today I tried to change 2FA from SMS to Authenticator app, since Authenticator gives greater security. However, the site said I could only use 1 form of 2FA, so I had to remove SMS. I did that, and now I cannot set up anything between SMS, Authenticator, or email. Authenticator never gives a QR code, and SMS/email say I have entered an invalid phone number or email, respectively.
Has Box removed 2FA from free accounts in the past 7 years, and I no longer have access to 2FA at all without a paid membership?