You're not required to enable two-factor authentication (2FA) for regular transactions, but it is required when withdrawing cryptocurrencies from your PDAX accounts.
By turning on your 2FA, you also give your account an added layer of security against unauthorized access.