Their 2FA is messed up.  You need to wait about 30 seconds AFTER the 2FA code has expired and then input it.