Typing a password slows you down, so now you'll need to enter a 2fa and a password. Fucking brilliant!
Demanding you to use 2FA? Should be standard in this day and age.
As long as session cookie lasts for, dunno, months. Extended automatically.
Mandating 2FA for every fucking time you use the app, and only using email for 2FA? Special place in Hell. (I'm looking at you McDonald's)
(Could be worse. Could be SMS 2FA.)