Not really. 2FA or other “strong” authentification for requesting the auth-code is common.

The receiving registrar doesn’t care at all.

Likely the only check there is, is fraud protection and that is them protecting themself against payment frauds and not you/the domain.

1. It does expire.

2. I used resin that had expired for a whole year.

3. If it doesn’t print/cure properly it is “expired”. Shouldn’t cause any serious harm to the printer or additional safety hazard. So just go for it.