2FA is very annoying but also sadly a massive improvement.

SMS 2FA on the other hand very much suffers from the problems you mention, hence why stuff like passkey apps or devices are becoming the new requirements.

(unfortunately I have cybersecurity qualifications, and have seen why it's needed)