I can't believe this is not there yet. Not sure why Apple makes everything very difficult. Mandating 2FA for all accounts without having the API support for Enterprise accounts is very immature. Every team who develops apps on Apple devices would have both Enterprise and AppStore accounts and they want to manage their systems well. Without API support, we can't automate certificates, and profile management for enterprise accounts which is a PITA. Hopefully, Apple delivers this soon.