From a staff post:
Continuing the discussion from Account PIN now required for transferring group:
However, I think that this only applies if you have 2FA set up on your account already.
IG you can ask him to setup 2FA on his account, and if he declines to then you can assume he just didn’t want to say “no” straight up.