Considering https://twitter.com/omgtbh/status/337567604887658496 I can't say I'm surprised...
(tweet text reproduced here: "I asked Hetzner if they plan to support 2 factor auth & was told that they already do - they require a username and a password. Seriously.")