For the people who know how to do that, they are just not going to use SSO in the first place. They will just use email+password+OTP.
If I ever lose access to my Google account I can just set a password through the "forgot my password" feature (I've noticed this is often also the only way to set a password if you create an account through SSO with some websites, but it does work). The convenience of SSO with an escape hatch as you say.