Afaik that is used for people not using 2fa. So they might be asked for email confirmation when changing hotspots or vpn.
It leads to the paradox situation that in some instances non 2fa accounts are more secure than 2fa accounts, because of cookie theft.