The email address you use for account recovery is itself a high-value target, because controlling it can bypass other protections. Securing it with strong 2FA closes a back door attackers love to use.
“The address that recovers everything is the address attackers want most.”