@WarnerCrocker @davemark for every app with a stored password? Only using Apples password management? Or had you used One Password?
I think I avoided it by only having one device, my phone, active, and being mostly offline.
I used to get calls for TFA authentication if using public WiFi (where it seems exactly like a man in the middle attack) or, when using a VPN at a family members house. Apparently triggered by unexpected ‘unblessed’ IP address?