I once was locked out of my Amazon account. The dual factor auth stopped working, and the process to log in otherwise would fail.
I contacted Amazon. 5 minutes later, they had disabled dual-factor and sent me a password reset link to my inbox.
So, gotchya, Amazon: you don't have any security, period. I mean, yeah, I did gain access, but so could someone else. Scary.