Bug: two-factor authentication enabled on every password change

I have configured the plugin to require Admins, Editors, and Authors to use two-factor authentication. However, when a Contributor (or some other user) changes their regular WordPress password, it automatically enables two-factor authentication for their account without telling them.

Because they are unaware of the change and do not save their secret, they are then unable to sign back in to their accounts and remain locked out until an admin can intervene.

https://www.ads-software.com/plugins/wp-google-authenticator/