I guess the free-ness of auth and I think locker is included with any photos subscription so maybe that’s the appeal.

Maybe it’s bad practice but I don’t mind 2FA being in 1Password because the secret key is the second form of authentication. Nobody can login to my 1Password without the secret key or access to a logged-in device. My credentials can be compromised and it wouldn’t matter.

The secret key is not technically “something you have” but it’s close enough for me.