i gained access to a scammers router and was able to set up 2FA to completely lock them out 
That is only a temporary thing, as you can simply do a hard reset on most routers with a paperclip, by inserting it into the reset hole. The way to lock them out permanently is to brick it with a corrupt firmware update.
with 2FA wouldnt they still be required to enter token? i dont think a factory reset removes 2FA
just like with an iphone. if actvation lock is on, a factory reset doesnt remove it
I am not sure if it does or not, but seems like an interesting thing to research. Not much documentation, so far only a few blogs have said a soft reset won’t, but a hard reset should. I guess it might depend on the brand/model/year manufactured.