One one hand, if I lose the database or manage to forget that password, I am fucked.
On the other hand, that’s also the case with 2FA.
The latter has already happened to me, but I have since switched to different software that lets me properly manage backups rather than doing only cloud bullshit.
Cisco Duo. That piece of shit doesn’t even do version control.
I just turned on an old phone, and there goes my backup, overwritten by old data.
And now everyone knows what to do.
You could do a sort of physical 2FA by requiring 2 pieces of paper from 2 different locations. Either a long password split into 2, which would allow partial weakening with either one, or random OTP and cipher text.