confidential peg-in on a 2FA Liquid address

[jsarenik]

Hello!

I would like to bring to your attention the followin issue: Blockstream/green_qt#132

How could such funds be unlocked and spent?

Thanks