The login page required a Google Authenticator code to enter in addition to the username/password. I had deinstalled Google Authenticator years back when I had no use for it, but reinstalled it now just for CP.
There is nothing in the changelogs about 2FA being enforced. I had 2FA disabled in Users at the time. Is this a bug?