Quick question. Did you enter your public PGP key on your profile? Even if 2-factor is not enabled, it can be imported and your signed message verified.