I'm guessing it has got something to do with the MFA bombing stuff, see link. https://www.wilderssecurity.com/threads/recent-mfa-bombing-attacks-targeting-apple-users.453805/