A code would be sent to the user's verified email whenever they log-in if they enabled 2FA on their account. Though I mainly recommend this for users who have editing access (like mods). So if someone tries to hack them and destroy the site, they won't be able to. Unless this is already a thing, then... Yeah.
