Guessing they forgot the password, maybe had account recovery set up on an old phone. I would have had to do similar steps if I hadn’t held on to my previous phone after deciding I didn’t want to even set up fb on my newer phone and then it wanted me to verify a login on my app when I decided to check it on the desktop.