Every barrier, stacked: Turnstile, email, SMS, and TOTP.
Any real inbox. It doesn't need to be unique — every run is a fresh account.