I think I would. You need to set 2fa before you can change the email address. After you have done that then you don't need to confirm withdrawals etc. by email anyway. I've already had to deal with a couple of hacked accounts caused by people having their email hacked first and then the password reset via recovery email. That couldn't have happened with 2fa enabled so I'd recommend it as being far safer.