I would assume that sender+recipient for the 2FA is stable, so your graylist software should learn that as a good sender. Don't graylist every single email from a good sender!