I don't understand this generating 'app passwords' after setting two factor authentication somewhere. Where you first had one password that was difficult to guess, you now have one password that is combined with the 2fa code even more difficult to guess, but because you have five apps that don't support 2fa you also have five passwords that are difficult to guess. But that is still five times easier to guess than before.