You're welcome!
Yeah, there is nothing too technical in there, the only thing is to properly understand how authority heights and thresholds work on Multisig.
Basically, a normal account has a single key with a weight and threshold set as 1 so it can sign and broadcast directly.
When using 2FA, your own key and the 2FA bot both have an authority weight of 1 and the threshold is set as 2. So it will need both signatures before being broadcasted. And the bot will only sign if the OTP is correct. That's it.