Authentication with Apple ID

I wanted to ask this to the community. Does anyone know of a way to change 2FA for Apple ID sign in, so that only phone authentication is allowed even if trusted devices include iPads?

I am IT for a client, and say someone wants to change the password, all they have to do is do the 'forgot password" and they are prompted to enter a 6 digit code to any of the trusted devices signed in. Or say, they want to login the account in the browser appleid.apple.com, the first prompt is to enter the 6 digit code.

On my own account only my phone is in the trusted devices so the only prompt I get is to my phone. Has anyone see a way to change it so it doesn't send the code to all devices but goes straight to a trusted phone?

Thanks.