F2A or mobile validation for each host connection

I have tested the product and it has some lack regarding the security role. If an attacker compromises a technician's computer with unattended access, they will be able to make connections to client hosts without issue. Missing is the option for each HOST to request a two-factor validation or through a mobile app for each connection.