I'm in middle of implementing 2FA using Google Authenticator or similar TOTP for SMF 2.1 and it wasn't hard, even if you want to implement it on SMF 1.1 which is what's running here, it shouldn't take long.