I used to think this but once you treat them as another path to get in they become really useful.

Yes, you still have your 2fa and password, but you create a fast path in addition to it when you get in.

It became even more useful once I stopped insisting they have to go into 1password