Last month my phone died and I lost my authenticator codes. Tried the recovery email, but that had the same 2FA setup. Spent 45 minutes on hold with support, ended up waiting 72 hours for a reset link. Has anyone else ditched app-based 2FA for hardware keys after a lockout like this?