I feel like freezing should get you a set of 10 one-time defrost codes. When you apply for something, you give a defrost code to the creditor and that lets them punch through. When you run out, you can re-authenticate and get more.

The normal unfreeze process could still work, but frozen really should be the default, rather than this weird freeze / unfreeze business you have to do. What we really want is to grant one creditor access one time.