Even then, I'd put at least some blame on Walmart. Adding a new shipping address to an existing e-commerce account is an obvious situation where a little extra scrutiny is warranted. At least a 2FA check.
I agree. In my country, many e-commerce platforms require to add of a phone number. Therefore, if you add an address, you must input the code sent to your phone. Another point to note is that, for additional security, some e-commerce platforms even put your account on hold for a few days if you change the aforementioned phone number.