My favorite fuckup is when the MS Authenticator itself tells me that it needs me to use MS Authenticator to verify who I am, so it sends a code to itself.
I have had Microsoft Teams open up Microsoft Authenticator and ask me to input my password, twice, and then (within Authenticator) ask me to click a button to get to Authenticator to get a 2fa code - again, while in Authenticator.
It's awful and I believe it's completely possible that some set of conditions lead to what the parent described.
You can't make this shit up.