Requiring ID verification to turn off / switch to a new MFA is not pleasant. Every other app lets me do this easily. If you need MFA always, allow me to add a new one before removing previous one.
Also where are you on supporting passkeys?