It's been a couple of years but I was able to set up 2FA for security keys (Yubikey and HyperSecu) and Authy (same as Google Authenticator but allows me to user more than one device to authorize). I then removed the phone number and backup email address.