The new 2fa requirement for performing routine actions like pushing deployments or working with env vars, is overly burdensome and really gets in the way of my day-to-day work. And with the 30-min timeout, it's really poor UX because I can think I started a deployment and then tab away, only to come back later and see it's sitting on a 2fa screen waiting for me to verify.

I can appreciate Vercel wanting to offer more security options, but I'd really appreciate an option to disable this. I'm already authed on a computer with hardware verification, and authed in Vercel enough to do other things, so it should be up to me (or my org) to decide if I want to enable this extra layer of security.