Use a recovery code instead

Single operator. Username + password, then app TOTP. No email/SMS fallback.