We don't have sudden huge traffic spikes and so we don't need automatic scaling. We maintain a few extra serves for redundancy and small traffic spikes. When business grows and we notice that current servers isn't enough we simply order a new ones.

> what do you think that Hetzner does not provide a 2 factor authentication

It's ok for me. Easy solution is to run VPN on hetzner server and access Robot (their control panel) only inside their own network.