@Tanklet I have 2-Step verification turned off, and have been required to enter a verification code for each login for at least a week now. For a test, a moment ago I logged in twice, one time with VPN on and the other with VPN off. Both times a verification code was needed. So using VPN is not the reason or at least not the only reason for triggering verification code.
I don’t mind having to enter verification code to log in. In fact, I was going to turn on the extra security soon, but I will leave it off for now in case you want to test it with me.
If BL has implemented stricter security measure and required the 2-step verification even for users who do not have that feature turned on, it probably should have announced it through the system message, instead of one message showing up only on the Handy app.