Doesn’t invalidate your larger point, but 2FA code completion is available to all apps: https://developer.apple.com/news/?id=z0i801mg