I'm not super familiar with all of it on a tech level, but is some of this because individual apps that shouldn't exist hoard it?

In my case it's Duo, literally the only 2FA thing I must use that doesn't let me have my dang token so I can use whatever app I want?