I came upon this thread while searching for a way to get email 2FA for the website and turns out the answer is, You have to add an additional email to your chase account
Then switch the option that says what it's used for to Online Security
Now I am trying to figure out a way to remove SMS 2FA because sim swapping of course