On: Recent 'MFA Bombing' Attacks Targeting Apple Users

[xsmasher]

I don't think there's any danger in clicking "allow." There's still a 2FA step after that, and then you have to choose a new password. All of the danger comes from the phone call, where they presumably try to wheedle the 2FA code from you.