Why can you only mark so much per minute if you dont have 2fa?
Because it is reputation and money. Maybe Poloniex will change the limits, it is their implementation and every marking implementation is free to choose their own constraints, interface, and usage.