Sorry for not responding earlier, but salute the input that you have shared.
The issue was previously mentioned in another post (2 Factor Authentication Issue) and it has been reported to Jira: [DHIS2-17428] - Jira
Thanks again for sharing with the community! Apologies if you felt alone 