As the sibling comment is saying, I never set up 2FA on my account. When I do, I'm using totp and store backup codes. Apple decided to force 2FA and use security questions as the second factor on my behalf.

On top of this, many companies provide customer support to reset 2FA with an other way to verify who you are.