Need to add a 2 Password Log in  

Strictly speaking, that would then potentially be needed for Safe Mode, not to mention booting to a command prompt.

Password protection at login is, anyway, a very limited form of protection. For example, anyone with a bootable disk, provided there's nothing stopping them using that, can boot your PC and access anything that's not encrypted.

So I'm wondering what extra security that would really give? I.e. is it really worth pursuing?

There is Windows Hello - fingerprint and facial recognition where you have appropriate hardware.

How to Set Up Two Step Authentication in Windows 10

I've not looked at the following in any detail... just a search for
2 factor authentication for Windows login

There is this:
Multi-factor Authentication Solution for Windows Logins

There may be some 3rd party tools e.g.
Multi-Factor Authentication for Active Directory

Rublon 2FA for Windows Logon and RDP - Rublon

I have 2 factor authentication for Windows login..... I had to use it once, and it sure was a blessing!