As sends miles redemption confirmation to owners account ‐ this is enough for me. If 2fa is added I hope this is optional choice to be selected by account owner.
I find constant sms or email with codes just to log in to some programs very annoying especially since I often help family members with various ffn needs. Also many do no get sms when traveling overseas restricting access to their accounts when they may need some urgent action.