Although not a Clef user, I highly recommend Wordfence Premium. Instead of Google Authenticator, which works fine, I use Microsoft Authenticator.

With Wordfence Premium, we get two-factor authentication and best security available.