Another option would be to make it an easily abortable multi-step process with a long delay timer, ie. you disable 2FA and an abortable 3-4 day timer starts ticking with frequent reminder mails inbetween. Once the timer is done, you can confirm the deactivation.
Video games have been doing similar things for character deletion for years, yet it is rarely if ever found for account credentials in general.
Video games have been doing similar things for character deletion for years, yet it is rarely if ever found for account credentials in general.