Don't use 2-factor if they're not going to provide the hardware for it. Demand a U2F (e.g. https://www.yubico.com/) if they don't hand out phones. It's not your account and you're only responsible for the security inasmuch as they provide the means to make it secure.

(Not necessarily directed at parent, but anyone who is unsure or worried about this.)