The UX of manual 2FA is a problem. Copying numbers with a time limit is just a crappy experience.

Account recovery is a hard problem, but thankfully it’s usually not an all or nothing deal, and it has been getting a lot better. I know Apple has a complex recovery flow that terminates at an actual human.