Feedback Security issue found on Unity Accounts

Hello,

Found a security issue on Unity Accounts.
Don't know if this is the correct place to post it.

DFA doesn't work with a manually created account - example an outlook.com account
i.e if someone creates an account manually by signing up and links it to their mobile number without an Authenticator app - the DFA would not work and it just acts as a usual password-only login.

Work-arround:
changed from old email address to new email address and linked that to the google/gmail account that had DFA already setup-up.