Password reset bypasses two-factor authentication

I reset my password today, got the link in my email, clicked on it and typed in the new password.  After I submitted it, it logged me in without asking for my 2nd step.

I don't think it can be a browser cache / cookie issue, since I reset my password because my hard drive failed, and my latest browser data backup was from before I set up NextDNS.