A friend of mine recently had a live chat with a customer rep. He found out that two-factor is apparently working as intended - it's account only. It does not apply to Norton Management and Identity Safe and presumably everything else.
It's basically 2FA at the bare mimimum. It's not good enough.