Erm, no, usually it is

Password - something you know <- moving towards passkeys like ssh
2FA - something you have (your phone/USB key)
3FA - something you are (biometrics etc)

not much point having multiple TACs at the same level, if someone gets your phone, he gets all 3 (sms, email, bank 2FA).