Ya it doesn’t work like “ANY” other 2FA out there… only provides an Oauth url and enables without confirmation. As others noted it may lockout more users than it helps.

If you pull the URL apart you can manually add the key and the correct hash type to most 2FA apps.