I'd expect most 2fa to be through an authenticator app (google authenticator for example), SMS, or a physical device like yubikey.

I don't think I've seen anyone use e-mail for 2fa. All the devices I listed above are in real-time through TOTP timings. E-mail is NOT in real-time.