What confuses me is that for a long while we told people to not write their passwords on a sticky note, to not write them in plain text somewhere.

Then we introduce all these "security" mechanisms that make it literally impossible to recover an account without backup codes.

Where do you store the backup codes? The average person, if they store it at all, will store it on a plain text file or in a sticky note.

Except that this creates a much more brittle system. Systems are safe when they are routinely tested/used. If you routinely have to enter your password, you are aware you need it. If you don't need your password, and you never have to enter your backup codes, you won't feel the importance of them until you actually need them.

It's the whole "I have backups" vs. "the backups actually work" problem except it's pushed onto the users who have zero technical knowledge.