Pretty sure the person who said they are getting 2fa emails was meaning that they are getting email alerts from Microsoft that says “we blocked these logins. Were they you?”

Some service providers do this when they see large attempts to access accounts fail due to 2fa blocks.