This may be a duplicate of https://www.drupal.org/project/email_tfa/issues/3249412 💬 One time login Closed: duplicate
Currently, if someone logs into a site that has email_tfa installed using the "drush uli" command, a confirmation email is still sent by email_tfa. While this extra level of security might be desired by some, it could be a major issue for others. For example, if a site is having issues sending mail, and therefore email_tfa is no longer working, it would be impossible for someone to log into the site!
The drush uli command is often used as a way for trusted users with server access to log in. Because someone must already have a fairly high level of access to the server to run this command, email confirmation is likely not needed in most cases. At the very least, I think this should be a configurable setting.
Closed: won't fix
1.0
Code
Sorry, we can't fix this because the drush uli is the URL for resetting the password.
You can exclude the user 1 or by role from the settings.