I received a product update today from AwardWallet, announcing additional account security via 2FA. Good news.
Except the "update" included credit card advertising. It's like opening a present that punches you in the face: surprising and unwelcome.
It gets worse. If I unsubscribe from this particular email, I remove myself from "important product updates," i.e. security advisories. Um, no.
So don't put spam in product and security update emails unless you like unhappy customers.
UPDATE: I go to enable 2FA and ... "Two-factor authentication is only available for AwardWallet Plus members. Please upgrade your account." So basic account security is something I have to pay for? /: