Find My Device - Is 2FA No Longer Required?

I've done a bit of experimentation which is related to [this question](https://android.stackexchange.com/q/257132/40347) . 2FA has been active on accounts, however, Find My Device seems to no longer require the second factor - only password is required. This seems to be the case when using an authenticator app, as well as the case of using a phone as a passkey. I also tested using a VPN to make my desktop IP one in another country. Can anyone confirm this or have an canonical links to this change by Google? I guess this makes sense in the case of a lost device where you need to log into a fresh device in order to locate it, and your device was the second factor. However, on the negative side any threat actor with your password only can locate your device and lock or reset it, albeit with a notification sent to you first.