I can feel uncalled hostility in your attitude, dictated by your conjecture which isn't the right indicator to make judgement about this specific incident. Ad hominem is irrelevant here since it's not about me but service operations.
Anyway, I'll still respond.
>Idk why you think you should be able to login to a cloud SaaS product while its down
The application works without internet access.
> Not all forms of Auth can be done locally, for example most 2fa requires server access.
TOTP validation can be done at the offline level. And the hardest proof of it is that the tokens themselves are generated offline. All that is required at the server side is shared secret and a Unix time syscall. This gets done at the browser extension level[0], no network required.
[0] https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...
