You use a less convenient backup authentication. The specifics depend on the use case, but even if you fall back to something less secure like an email and TOT

You use a less convenient backup authentication. The specifics depend on the use case, but even if you fall back to something less secure like an email and TOTP, you still come out ahead overall because most authentications are done by U2F.