@hotdogsladies if somehow he does get back in you can do the two factor authentication thing from the iOS password manager. I have mine setup through that and it works pretty nice. Better than downloading some other Authenticator that you have to remember to migrate to a new phone.
https://www.wired.com/story/apple-new-password-manager-2fa-iphone-ipad/