Security is also man basic needs on earth because it’s very devastating and most times deadly when someone steals our valuables. The reason I suggest for a confirmation code for every transaction is simply because bitcoin and most crypto are decentralized making it almost impossible to recover lost coins. There should be a confirmation code sent to our email or phone number during transaction in crypto wallets to originally prove the transaction is being performed by the real owner of the wallet, once the confirmation code is received via gmail or any other means and has been copied in the appropriate place. This action will automatically confirm the transaction in the wallet.
That is the basic part of decentralization, you only have the key and you need to protect it by any sense. You can used 2FA, and this is what you are describing.
I have had reports of people complaining of their lost wallets. some where asked to provide the pass codes of their wallets forcefully at gun point. In my locality now this is the modern age robbery. People are much aware about bitcoin and are using this means to steal from innocent bitcoin enthusiasts. My friend was a victim couple of days ago as she was robbed of her valuables and the robbers went further to ask for her blockchain password which she fearfully provided and immediately her bitcoin was wiped away from her wallet. This is so scary and threatening to bitcoin enthusiasts.
This is another thing, you can't do anything if someone is pointing a gun in your face. Not sure how your friends become a victim and it's unfortunate event. I can only speculate that she might have talk to someone offline or online and blurted about her bitcoin stash. So that's a big lesson not to divulge your bitcoin holdings to a total stranger, just keep a low profile.