Security issues

Why does logging into account via password or PIN usually limit access to sensitive information (requiring further authentication), but if you log in via one time code it removes all of the sensitive information protection? This seems like a security flaw to me, (and can it be resolved or fixed?)