Currently only 'Super Users' can perform 2FA resets, this should be available for 'Team members' also. Especially when they can send a message to support requesting a reset which then gets done ultimately defeating the object of the different perm...
