Ok, yes we understand your question. What websites are there that do two factor authentication on the login as we would like to look into this? If someone has your password and your email login they also cannot be stopped from withdrawing as well with two factor authentication. We want to implement the best security as possible.
Google Authenticator is pretty widely used for 2FA. My email account has 2FA on it so they wouldn't be able to login to my email account even if they had the password.