I set up two step verification a few weeks ago, yet downloaded a free app yesterday without being asked to provide a verification code. Anyone know why this would have happened? I regularly receive emails purporting to be from Apple claiming that my account is being accessed from unknown devices, but I presume these are spam. The one time I sought Apple's help about them, they advised me to change my password and set up the two step verification, which I did.
