That's what 2FA means though: once you enable it you need both factors to authenticate, whether or not you had them when you first signed up. I agree that if they required you to switch to 2FA at some point, even though it wasn't required when you signed up, that's abusive. But not being able to log in without your phone or other something-you-have credential is the whole point of 2FA.