It's the default but you can set up a password as your second factor. You should really do that if your Telegram account is important to you.