Sure, if your computer gets owned, it won't help, but it's still much better than nothing and practically free.
- Locked out of npm because I don't have the 2FA key anymore
- Recover my 2FA with my email (which totally defeats the point of 2FA)
- Be asked for some gvmt ID to proof who I am (again a no-no)
In case you don't, you can write down the seeds of the OTPs on a piece of paper. Which you leave at home or at a friend's house or similar. The principle being that you won't lose both your laptop and piece of paper at the same time.
edit: for a "good enough" approach you can probably store your 2FA codes in your password manager, for which you have, presumably, some kind of backup.
Get a yubikey[0], that way you don't need a phone.
I find the recent push by big tech and others to discredit open software solutions like PGP suspicious. Banks push out new apps on a yearly basis, we are supposed to insert USB sticks to contribute to open source. Big tech rarely acts in your best interests.