But isn't that kinda the crux of it? If I can withdraw cash by presenting a photo ID instead of using my 2FA online, it is both more convenient for me as an end

But isn't that kinda the crux of it? If I can withdraw cash by presenting a photo ID instead of using my 2FA online, it is both more convenient for me as an end-user and also less secure (opens the account up to social engineering, fake IDs, etc.). Similarly, some 2FA implementations allow human support agents to manually reset the 2FA, sometimes making that the weakest link. The ruthless alternative is "If you lose your 2FA, you lose your entire account and there's nothing we can do about it". I've rarely seen that implemented in normal apps.