There are Bluetooth FIDO security keys out there for 2FA, like: thetis.io/products/fido2-ble-security-key. Some implementations can also use a phone, running an app via BLE. Not sure if they use it, but that could be one reason it’s asking for that permission.
Camera permission may be needed for scanning QRCodes to set up 2FA.