The control panel does have 2FA via TOTP and Yubikey already. Webauthn is coming. We're working on a solution for the mailbox 2FA, hence the (yet).