Yes, 2/3FA with a hardware key and push for login and access to anything security critical, and 2FA via push for everything else.