Do the user have 2FA protection?

Yes, draglet has email based 2FA and google authenticator.