I use healthchecks.io to alert me if any backups dont fire on time or have error states, free to use and a nice first line when I can’t keep an eye on it regularly

I bet the 2FA secret was leaked too though…

Interesting, didn’t know that. Do you think that different enough from a timeout / reboot requirement of code? Could the app tell?

Nothing stopping an exta fingerprint being registered though…