Q:I got a verification code that I did not request

Someone may be trying to sign your Apple ID, which would generate the request for a verification code. Since you have 2 Factor Authentication enabled, as long as they can't access one of your trusted devices, they can't get a code, and sign in. You should be okay.