A heads-up when renewals failed would have been a great thing. All I got was "could not renew" messages. And even when I updated my payment it was rejected. The "2FA required for stored payment" messages were only visible once I tried to manually renew the domain that was failing. Not on the payments screen. Nowhere but when I actually tried to manually renew. At the minimum, the "could not renew" emails should have had in giant freaking font "If you do not have 2FA set up, stored payments cannot be used!", and that would have told me "hey, I guess I should turn on 2FA so my auto-renewals still work". I might have to start investigating a new registrar, as the communication has been very poor. And before I clicked 'create post' here, I double and triple-checked my emails. NOTHING about this at all. Just a generic "could not use your stored card" message. DO BETTER.