Yeah this is the cancer that is email 2FA.
Unfortunately email is the only way they have to verify your identity. No email, no account. But this is very much not exclusive to Rockstar.
I changed my email a couple of years ago and it’s absolutely astonishing how many companies are completely unequipped to deal with someone changing or deleting their email account.
Yes, it is the lazy way to secure accounts. No defense there.