I don't think it's that bad. Reminds me of my current login flow for some sites where I utilize 2FA.