Apparently, even if you change password and add two-factor it doesnt log you out of all devices and the unauthorized user still has access. I cannot remove them as of yet and no clue why it doesnt allow me to. This is a joke.