

At a glance (haven’t enabled yet, will later today), GoG uses the RFC standard TOTP model. This means you can use whatever app you want whether that is the google authenticator that ties it to your cloud account, something related to your password manager (e.g. keepass or bitwarden), or even just a python script you have in a random directory. It gives you control of your 2FA and protects you in the event you lose a device without properly de-authenticating it.
Valve use their own model that, to my knowledge, is only accessible through the Steam mobile app. Which is a huge nightmare if you ever have a device stolen/damaged (and is why you back up the recovery code)
Just enabled. Yup, bog standard TOTP and they even provide the plaintext key so that I don’t have to extract it from a QR code.
Big sack of cash and a good mark on her CV. And Obsidian has been kind of a clusterfuck the past few years with Avowed having been more or less restarted from scratch like three times?
Netflix games is a sinking ship but so is… a lot of the games industry. Whereas working as a creative at Netflix is potentially a way to pivot out and away from games entirely. Carrie is also a writer (I think self published?) so that is a further way to seem like someone who can transition to a different department.