Hey if you run account security for a large social media website and send people reminders about backing up 2FA codes you should really try to avoid “optimizing” it by using the same message you send when someone first turns it on

If I receive a notification that looks like this:

Hi!

Thanks for enabling 2FA!

[four paragraphs about how to back up your codes]

Oh by the way we might send this to you every once in a while to remind you.

kthxbye

I’m 100% going to start reading this and assume I was hacked