Why wouldn’t they make sense for recovery? They’re authentication factors just like passwords.

“Second” factor means you should have multiple, not that one of them is beneath the others. And they all work just as well for authentication and recovery.