My credit cards in Sweden have a form of 2FA through 3-D Secure + BankID, if a purchase for some reason scores poorly on fraud detection (large amount, unusual purchase, etc.) it will trigger a 2FA request on my BankID that I have to approve.