After submitting the TOTP key to the verification platform, if the authenticator is not reset, the third-party platform will continuously hold that key and can log into the account via two-step verification at any time.