So use the recovery codes. Or scan the QR code and auth from another device

I’d buy that there are too many different confusing ways to recover from this situation, but not that it’s impossible

Sure, yet in the real world those are the acceptable means if you want your customer to continue to pay you when they've lost their phone.