In the world of privacy, it's often best to reject things that are too convenient, but I managed to find a way to use KeePass for 2FA. Just create another vault with a different password and use that one specifically for 2FA. This means that if one of your vaults is compromised, you're still not at risk.