I see it as an improved method of confirming that it's working. For power users it may be pointless, but for the average user who probably has never used any ki

I see it as an improved method of confirming that it's working. For power users it may be pointless, but for the average user who probably has never used any kind of 2FA (perhaps besides SMS) it makes them go through the real motions of authenticating with 2FA before turning it on for real, which will prevent many stupid user mistakes (which I admit I've done myself once.) I think it's a major improvement for ease of use in exchange for having a small once off window where you're not protected by 2FA.