I mean, to not get hacked, 2FA is a good way to do it. However, this is a forum account for a martial arts forum. Not much data to protect here, I’m guessing. I’m in IT, so I understand 2FA and MFA better than most. But to require it from a Sherdog user that's nearing 35–60 years old (I think most users are in this range here) is a bit of a steep ask, haha. My balanced advice would be:
Require it for mods, admins, and special ranks. Encourage it by providing rewards for those who do. And do not, under any circumstance, make it a requirement in this exact scenario. So, unless this is part of a larger operation, I implore you to take my mini-consultation to heart, lol. Or else this ship will sink.