> you ideally place your 2fA devices to multiple people you trust

That's a really good point. I keep a key with a friend in another city. When I visit them I use a query like the one above to determine any services that need to be registered with the normally unavailable key.

> So it makes this setup a bit harder than it could be.

I wish there was a way to enroll keys without them being present.