> This is why I am a huge fan of web-based clients and not things like Thunderbird. A false dichotomy. 2FA login is achieved through "web login", where an auth

> This is why I am a huge fan of web-based clients and not things like Thunderbird. A false dichotomy. 2FA login is achieved through "web login", where an authentication token is obtained by presenting the service's 2FA interface in a web frame or a simple web browser. See e.g. the initial setup flow in Android 4.x - the Google login and password are a regular form, but if 2FA is enabled, you're shown a web browser. Whether clients like Thunderbird implement web login remains a quality of implementation issue...