Hacker News Reader

That is moving the point of failure to the domain registrar. Which is probably less likely, but you are always relying on someone.

I think that the point here is that your domain registrar will pick up the phone if there is a problem, where Google clearly will not.

I use AWS to register the domain and AWS supports up to 8 different MFA factors. I have totp and 4 different passkeys registered