Everything you listed, plus a recovery email option, plus backup codes, plus SMS. That's already a lot and anything easier would allow people to just take over

Everything you listed, plus a recovery email option, plus backup codes, plus SMS. That's already a lot and anything easier would allow people to just take over accounts that they don't have a right to.