🇩🇪Germany giuspe Berlin
Just for reference (the code is not production-ready or module-ready!) this is the patch we use to enable the desired behavior.
The patch forces "src/Form/EntryForm.php@buildForm" and "src/TfaLoginContextTrait.php@isReady" to check the user's enabled authentication plugins (with completed setup) and use one of them before checking the default one.
The patch is tested with version 2.0.0-alpha2.