sucks , always add 2fa if you playing with the amounts you consider above average
Stake has the Vault , when even if you don't have a 2fa set up , sending your coins to the vault when you finish gambling keeps them safe
it acts as a semi-2fa , where one has to confirm any operations with the Vault clicking a confirmation link in your e-mail
function "confirm via email" would be redundant IMHO , if you can turn it off in your account there is no point having it
if you cannot turn it off , then it would be annoying as hell to e-mail confirm your withdrawals every time