Your two factors solve your 'identity' but not your 'authority'. This is why we have both usernames AND passwords. 'Who you are' is your username. 'Are you all

Your two factors solve your 'identity' but not your 'authority'. This is why we have both usernames AND passwords. 'Who you are' is your username. 'Are you allowed into this system' is your password.