So if someone steal your keys, you have no way to protect yourself.
I don't thing 2FA is necessarily not decentralized.
Let's say you could use a TRezor or Ledger for 2FA, that would add a lot of security to the system. Not completely decentralized I agree... there must be a way