Does not work

Sorry to report, as others have, that I entered any six numbers that were not my auth code, and this let me in to my site nevertheless.
I do not have any other security plugins enabled.
It’s a big hole and is enough to make one suspicious about the motivations.