I hate this, but you MUST enable 2fa in the way YOU want, or else google will opt you into "2fa" you never consented to on some app you don't remember installing.
Maybe hugely insecure but I enable google authenticator then put that recovery code and key everywhere I can.