It's impossible (other than mutual TLS) to do mfa on the native ios mail app without trusting a third party for one of your factors. Hopefully Thunderbird will support it...

They have a paid email service now. This is likely for that and for other users who want a thunderbird-based, free e-mail client.