and is

has_2fa

more intended to be a value provided at runtime or is it something that you're reading off of the relation?