this is where a web based 2FA tool comes into mind.
I had began working on @Fauth Module for ns8, but ran into headwinds here: Error with container image name starting with a number - Bug - NethServer Community
Am not sure as to the progress on this issue so that the app can be published, and probably will benefit and implement an actual 2 factor authentication that Andy is asking for. even if your unlocked phone is stolen, they also need to gain access to your server SMH