As you probably know, it's impossible to use QC with IB that is not registered within the USA because it's impossible to change/disable the second-factor authentication.

Why is it a must?  
Can't it just connect for the first time to the IB gateway (with second-factor approval from the user) and that's it?

Any way to work-around it?