Agreed, this is exactly how 2FA should work. Allowing support staff to deactivate 2FA is a massive security weakness.

It's great until you discover that Google's migration tool doesn't port Google Authenticator data when you switch phones. Ask me how I know. :-)

You can recover 2FA if you're already signed in on any other device though. You just have to enter your password on the device you are signed in on.

Uh, no saying "any other device" is too sweeping of a generalization. You must be logged into a browser specifically: You cannot turn two factor off from the app.