In JetBrains Hub prior to 2020.1.12629, an authenticated user can delete 2FA settings of any other user.
jetbrains hub