The crappy design here is that this is called Core. Core implies it's a central or fundamental feature. I wouldn't consider that as part of a paid upgrade path.

Hey, AI furry slop is precious. It deserves 4-factor auth at least mister.

i have an email account that i'm not receiving valid 2fa emails which are sent to me. to add the sender email address(es) to a white list in order to bypass server-side mail filters (which are blocking these emails from reaching my inbox), i have to pay and subscribe to unlock the feature.

at the one service i care about, to change its email to a different email address, i have to be able to receive those 2fa emails and validate a code to authorize the change.

Just add the 2FA token to you password manager. I know keepassxc can do it, i assume others can too. 2FA is just not necessary for things like this.