It would be nice to have a setting to force the 2F Authentication via email for all users with role Administrator. Therefore in a Multisite (Network) installation there should be a settings page for each site and one for the hole network. If force two factor via email is enabled for the hole network the setting should not be changeable by a single site admin.