No, it's not new.  2FA settings can be changed in OIA at https://accounts.intuit.com/index.html.

Instead of texting you the security code, you can choose to setup an authenticator to generate your security code.

For anything with client data, I'm happy to deal with the inconvenience of 2FA just to buy the peace of mind, knowing the account should be much harder to crack.