Two-factor-authentication is becoming a standard to secure valuable digital property. It does not solve everything, but is a good baseline practice to make overtaking of accounts more difficult (in certain ways). There are tradeoffs, namely costs, support time, and most significantly the increased work the user is subjected to for login. So many considerations should be evaluated. My advice has always been to use 2FA or MFA for your most valuable digital assets.