2fa is an extra feature and not a requirement on any app that I know of. Some may ask you to set it up but you’re already logged in at that point.

Can we do a nostr Authenticator that works similar?