I am intimately familiar with inheriting someone else’s code. There is no way this should have taken 3 years to implement. Sure, more complicated changes may take longer, but inserting a couple of server objects and a few columns to an existing database table to handle 2FA is not logistically difficult.
Regardless,…