I used to think this but once you treat them as another path to get in they become really useful.
Yes, you still have your 2fa and password, but you create a fast path in addition to it when you get in.
It became even more useful once I stopped insisting they have to go into 1password