So that even if an abuser manages to steal your password, because they don't have the second factor, they will not be able to log into your account.
De modo que si un abusador logra robar su contraseña, no podrá entrar a su cuenta porque le faltará completar un paso.