Yes, we recommend using 2FA on the active authority since that is the one you would use in hot wallets to handle your transfers and such.
But the owner key has a superior authority so it would allow you to change back your active authority configuration, and should stay safely stored offline.