Everything you listed, plus a recovery email option, plus backup codes, plus SMS.

That's already a lot and anything easier would allow people to just take over accounts that they don't have a right to.