Discovered that Spamdyke's "greylisting" is why the 2FA code emails to my hosting provider's email accounts often arrive so late they expire.
It bounces the first arrival of an email with the assumption that a non-spammy email server will retry.
Turns out this really confuses whatever queues are sending out these 2FA code emails. Sometimes it takes an hour for them to arrive (expired). Disabled it & now I can get into several services I've been locked out of.
Ugg.
In theory once one email from the sender's server is let through, the future emails shouldn't be delayed any more.
Yeah.... not the case unfortunately.