As a 2nd factor, SMS would be sufficient in my opinion. There are plenty of cheap services for that. or they could implement a standard hardware token like U2F https://en.wikipedia.org/wiki/Universal_2nd_Factor
We asked the admin before a few times about 2fa, and their reply was as usual "we are working on it" and this was sometime in the Summer.
Lately with the issues the site is having, 2fa doesn't seem top priority at the moment.