There's any way to prevent an user to disable the two factor authentication?
Not at the moment but probably soon. See T150562.