2FA is automatically bypassed after resetting password

My account have 2FA on. So usually, I log in, enter the 2FA code from an authenticator app as required. But I just discovered that if I don't want to enter it, I could:
- Click forgot password

- Enter the email address

- Go to email inbox, and click the password reset link

- Enter a new password, and enter

Now I have bypassed any authenticator app entirely!

However, I don't expect this behaviour here, nor in any other app, as enabling 2FA means I want my account to have one more layer of security.