Well, I'm of the opinion that he should create it now, seeing the level of complaints of account hacks and all that. A 2FA should help buffer the security of accounts here. I know it takes time to recover any hacked account even when the owner has a signed message from a wallet they've staked here. During that period of wait, the user would've lost their slot in a campaign. That's me assuming they were in a campaign before that hack happened. Just like posting here and ranking up was without hassles in the past until theymos implemented the merit system to control spamming. He can also implement 2FA on accounts. After all, change is the only constant thing in life. BTW, we've seen less serious business minded sites  implement the 2FA on their platforms. So, it shouldn't be a big deal for theymos to implement. He can also delegate it to programmers here and I'm sure someone will pick up the challenge.