2FA would help prevent escalation of privileges in some limited situations. If you had my sudo password you still wouldn't be able to do anything unless I click

2FA would help prevent escalation of privileges in some limited situations. If you had my sudo password you still wouldn't be able to do anything unless I click the button of my 2fa device.