2-factor-auth can be done with either email or cellphone text. default is cellphone text, but I always manually change selection to email

I'm not sure what's the criteria, but my guess would be foreign IP, browser or somehow you let baidu know that you are not from China. the other login method which I never tried is the 2D scan code