Thanks for participating in our EXPERT DAY! I will be your expert! 😄
Unfortunately neither of these are currently possible and would be feature requests.
The 2FA option is currently considered to be covered by a "Whitelist". As TeamViewer is very account-based, if you place a whitelist on the device and 2FA on your account, 2FA would protect the device. However I have still raised this as an idea.