Huh? That's like saying USD needs 2FA.
Wallets have 2FA, not coins.
Wallets are more like banks, except the user owns their own bank.
The issue with theft over the last year was primarily from rug pulls, bugs in contracts and things like phishing/domain takeover.