So he set up 2 factor authentication, does not have access to one of the factors and now he can’t login? How is that Apples fault?
Note that you can also set it up to call you instead of sending texts; I presume he can take calls otherwise I don’t understand why he even took a phone with him.