I would greatly appreciate if you could allow users to see the private key of your actual OTP 2FA without having to reenable. This could allow users to have more than one 2FA apps if they want without having to rely on changing it every time they want to add a new one.
This should help people than want to migrate from 2FA apps that don't have a way to export the codes (such as Microsoft Authenticator).