It's not really 2FA even. More like a magic link (which is what we use for verification via email). The customer has no password, just verifies using a code via sms/email.
For signups to our app (to get an account with a booking site) we require a password.