Sure you can bake 3fa into your applcation. Hashicorp vault has something like this to generate a root token. You can split your unseal key according to shamir

Sure you can bake 3fa into your applcation. Hashicorp vault has something like this to generate a root token. You can split your unseal key according to shamirs secret sharing. You can bring together a specified number of unseal key shards and generate a new root token with them. The app had endpoints to manage all this. You could create your own app with your own endpoints with similar functionality. I don't think there are cryptographic primitives to give you this easily, without some trust logic baked into the app layer.