I think the 2FA he is speaking of would be more like a password or a pin.
The player sets the PIN once and then each time they connect (or try and run a command), they not only have to have the rank, but also have to enter their pin. This could prevent unauthorized access in certain circumstances.
Realistically, however, if your server is secure and you don't install a million suspicious addons, you shouldn't be having issues.