Enabling 2fa sounds like a good enough security for most.

If you mean they may have a vulnerability, they've gone through a few security audits.

If you mean you can't adequately keep your own server secure, then pass it.