Yes, I'm doing exactly that. It makes little sense.
Steps to do a command-line push:
1. log in via web with password and phone-generated token
2. generate "personal access token" and copy to clipboard
3. use personal access token to log in
However, now that I have the personal access token generated, there's no further need for 2FA.