What is the equivalent to the “recovery codes” other 2fa registration schemes would provide you?

I note that another financial institution website uses the VIP Access app, and provides no recovery codes, stating that you if you ever lose your device you are just supposed to call them and they’ll let you in after asking you your first dog’s name or something. I sure hope they get a competent Chief Security Officer soon.

I’m not a Python guy, but when I type vipaccess provision -p -t VSMT, I am told Something went wrong — the token is invalid.

Is there any way, by the way, to use VIP Access with PayPal?