Best method to integrate 2FA for our members and staff?

We are hosting Ghost on a cloud-based service and installed Ghost core. We have everything working, but are very uncomfortable with the lack of 2FA or MFA. For those unaware, this is two-factor or multi-factor authentication.

We just loaded the last version of Ghost, the security update, and still see no easy method for this. We were looking into Ghost integrations as a possible method for this.

Does anyone have a successful method for doing this, or installing/enabling 2FA while retaining the ability to easily update the Ghost core? I’ve been searching on this forum and others and cannot find. Thank you!