Hi @scottalanmiller you should be able to disable a user's 2fa from the admin settings page for 2fa:
68360b3f-4589-4ffb-80ca-bddd8d685adb-image.png
Prioritizing SSO seems to make a lot of sense. Simplifies and speeds up authentication and encourages user registration by replacing typing in email/password with simple click/tap and accept.
It would be nice to have a switch to reverse Email/SSO priority and a link to reveal (unhide) email registration. There is a solution pointed out by @PitaJ but using CSS will not allow auto-translation and may be uncomfortable for some.