Security
A second factor is asked for when your wallet is used (exported, recovered onto a new device, or signing), and it will be required to withdraw.
Two-factor
Text-message codes are deliberately not offered. A phone number can be moved to another SIM by somebody who persuades a mobile operator, and a factor that can be taken over by a phone call is not one worth having on the page that decides whether money leaves.