We have 2 ways.
1 - just pay via smart contract. (no need any log in)
2 - make a dashboard for payments. (needs log in and token transfer to dashboard)
ICO dashboard just reflects your token. It cannot manage tokens. Just sends it to your wallet after your transaction. So there is no hard needment for 2FA but, people are asking 2FA so we gave our devs issue to set 2FA on our dashboard and they are working on that.
However there is always the risk that if someone's PC is compromised, an attacker could log in as them and change the smart contract address to their own.
So thanks for asking the Devs to have it added.
In Crypto, too much security is barely enough.
