Along with keeping the 2-step authentication I think there should be a way to disable it without needing the code from your authenticator... As I've just encountered after factory resetting my device with the auths on before disabling it, unless you contact an admin to fix this you'll be locked out;
I suggest maybe adding an E-Mail service to disable the auth as well just in case this happens to other players
Thank you! :)