Uh - huh! When I called again today I got another know-it-all agent with a raspy voice who told me that if's required by Amtrak then use it.I signed in today and got the immediate response that my password must be changed; nothing about 2Fa but when I changed it, I got the notice about the verification code. I did it, and it was fine. Many sites use this now, my credit union account uses 2Fa, you don't have a choice. I don't find it burdensome, just my .02 though.
Amtrak doesn't do technology well at all. Uh - huh!