I've seen several verified accounts say that 2FA was required when they got the verification, but apparently they still have the option to disable it later.

https://twitter.com/mattblaze/status/1319295891765972992