I doubt it's a misunderstanding of "2-step authentication" because even big companies (like Google) are doing it, I'm pretty sure they know the difference.
Maybe it's just a design trend, I don't know, but either way it's annoying as hell.
IDK, LastPass seems to be doing fine with it.
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.