Yes. We will eventually implement a screen in login app which will ask (force) users to enable 2fa and provide the QR Code for them to register.
What I'm saying is that for now you can workaround it.
And, in some systems, users might not want to enforce 2fa on users. They just want to forbid access to some features if 2fa is not enabled. In this cases, the problem remains.