Odds are, the 2FA they're (already) offering is a service that is/was already infringing our IP. IMO, Reddit (and many many others) have already, albeit indirectly, been clients for quite some time via infringing 3rd parties.