Do users have two-factor authentication (2FA) protection?

Yes, skalex supports Google Authenticator and email-based 2FA.