Hello,
I think that Xenforo should implement 2fa onto the 'client area' (https://xenforo.com/customers), I looked a little bit and couldn't find it so I'm unsure if Xenforo already has something in-place for the client area, if not I think it would be a good touch, even if its like email...