Comment 1 for bug 1678483

You need to get a application password (or something like this) on your Google profile security options. It's a single use password for applications that don't support 2fa.

It would be nice if Mail supported 2fa like other mail applications do, but the single use password works well enough.