Yes, but only for a specific role: anyone on the built-in default "Admin" role who is not a SuperAdmin and not flagged as an Onboarder is shown a blocking "Two-Factor Authentication — Required for all admin accounts" popup on every page until they set it up. It can't be dismissed or worked around — the only way past it is to click Activate two-factor authentication and complete setup.