Supposedly, I've been talking via email support with the supervisor of the Customer Service Dept and they absolutely WILL NOT BUDGE on this! They won't even help by moving the funds at my request on their back end! I told them this kind of behaviour is illegal in North America and what do they respond with??? "What do you mean by North America?" Who ARE these people?!!! What planet are they from?! If I can change my wallet ID over at Coinpot (different thread), I'll just forget my xapo account ever existed. I have roughly $20 CAD in satoshi over there, but it's just not worth the hassle anymore. Not when I get idiotic responses like THAT back!
Yes, not now but for quite some time they started to give 2fa code from the app on a mobile phone.
I think they already have a solution for your issue and you just need to find one phone to access your account and not sure anyone will take instructions to move funds from email.
As you said funds are so much then just wait until you get a new phone to access your account.