This seemed to be better a few years ago. More recent macos versions suffer from more problems due to T2 and all the mess that goes along with that.

Have you ever tried to recover a system that is one of the factors of 2fa? People spend hours on this typing in answers to security questions and figuring out how to get around stuff that apple is actively preventing you from doing.