I strongly dislike 2FA and MFA solutions and really they seem to be to be a way for services to protect themselves than to protect me, since if I lose the device they’re connected to then I get locked out myself

I use ente auth for 2FA. Is it less secure than hardware authentication? Yes, but at least i can recover if i ever manage to lose everything in a freak accident. Besides, it’s more secure than no 2FA :p

Software 2FA is a good middle ground (recoverable yet still secure)