Since recommended channel sizes at usually 1M sats or more, and multiple channels are needed. Users are expected to be holding non-trivial balances on Alby Hub.
Also the Hub account controls user's nodes.
Thus, Alby Hub should allow users to add 2FA through authenticator apps as a additional security measure.