Yeah, this is still happening.  Got it to stop once, for about a week, and then it's back.  2FA is off.  I do NOT receive MFA emails so that's not it.  Don't say it is.  Being in IT, I'd be exceptionally embarrassed releasing something in this state.  Then again, I care about how my customers (and their customers) use the software and how it impacts their lives.  Apparently, you don't.  This issue is enough to drive me to look for other solutions come start of the new fiscal year.  I'm sure others feel the same.

You need to fix this.  Here, I'll help:

if (settings.two_factor_enabled) {

    perform_two_factor();

}

redirect_to_dashboard();

Fixed.