>>mathia+(OP)
I really want to like this but the limitations described, requiring an admin account with 2FA disabled, makes this more risky than not using it at all.
Until those limitations are resolved, if that’s even possible, this feels like an audit hack rather than a security solution.