The only issue I see with this is not all email clients support 2FA… so realistically 2FA is pointless unless you bundle the software that allows for it. NextCloud and RoundCube are easy to get 2fa working on (They both have plugins for this) but dovecot with an email client like outlook, thunderbird, or eM client wouldnt work as expected.