A bit like the awful workflow around developer agreements in App Store Connect. Every few months our CI breaks because Apple has updated one agreement or another and someone has to go pester the executive who's marked as the account owner and has legal authority to sign new agreements to unbreak our CI.

It's also impossible to delegate this authority to anyone other than the account owner, and there's no concept of shared or service accounts, so nobody other than the account owner, with access to their 2FA method is able to do this.

Heaven forbid if the account owner was ever to put their 2FA method as a personal device / phone and then leave the company.