Force 2-factor Authentication

Is it possible to force all users to have 2-factor Authentication on their next sign in because I feel like security is very lack lustre?

Not in my knowledge. Change default port and use CSF to limit login attempts, those will stop most hackers if users have proper password.