Ah, that’s it! Thanks. Setting to OAuth2 on both SMTP and IMAP triggered google’s authentication window and now Thunderbird works with 2FA Gmail account.
Still, the bug is, that Thunderbird is not recognizing 2FA switch and not providing proper interface to switch to OAuth2.
Thanks for the help!
I submitted the bug: