I’m not sure I quite understand how this would make them unable to support normal 2fa until now.

Keycloak is one of the most configurable and flexible auth solutions, and there is no way it didn’t support otp based 2fa until recently.