Ok I have no cancelled it, and ordered a physical authenticator thingy. The second won't arrive i suspect for another week or so. (during which i trust SE will tighten their security, waaaaaaaay too many cases of people being hacked to be coincidence)