I'm currently struggling to get access to an account for which my daughter lost the number (it was a prepaid phone number, went back to the pool). The biggest

I'm currently struggling to get access to an account for which my daughter lost the number (it was a prepaid phone number, went back to the pool). The biggest issue with 2FA, is that everybody allows you to set it up with just a single second factor, so losing it, means you're out. In enterprise contexts, it's not an issue, there's another factor that you can use in an emergency, which is basically contacting IT. But for things like Google, Apple, etc. you should not be allowed or required to setup 2FA unless you can provide two distinct second factors, one for regular use, and another for recovery in case the first one is unavailable. This is such a glaring usability omission that I cannot fathom how the heck we're still pushing for it.