Please inform the team via GitHub issue: https://github.com/2factorauth/twofactorauth/issues

It turns out that (outside of FB employees), Instagram 2FA is only enabled for users with more than 1,000 followers. So, if you don't have more than 1,000 followers, they don't care if your account is hacked.

Are you sure it's rolled out for everyone? I have been trying to find it (web & mobile app) for weeks and can't find it... I know there was a bunch of press about it in February 2016, but I don't see it in the UI.

I do have it since the beginning of 2016... I have 16k followers so it might explain the 1k+. It's in the options, right under "Posts You've Liked".