I know some people have asked for a multi-role feature. If a person has a BW account, maybe the emergency access could be via one these roles.
Instead of strait up disabling 2FA, if emergancy access is associated with someone else’s account, it could allow that other account’s 2FA as a super-set.
It would be desirable to never drop 2FA if possible.