hello,
please consider this scenario that DC have only one admin user.
what if the admin user after he configure the TFA setting he's being lost his authenticator app, or if he type his mail wrong and hit save , how he can disable the TFA or resetting the TFA configuration ?