Is that possible if someone has iPhone MAC address can he he coloned the device despite the device has two security factors but the home network is compromised

No. MAC addresses have nothing to do with cloning. They just identify a device in a network.

The can use the MAC address to make a different device appear as the original, but all that will get them is access to the network as the original device, but will not affect the original device in any way.

➡️https://en.wikipedia.org/wiki/MAC_address

If he's spoofing the MAC Address, the easiest thing to do is to block that address at the router so they cannot connect to it and join the network. You may want to restart the router after making the configuration so everybody is disconnected and the other user cannot connect again.

You won't be able to connect with the iPhone either, but you'll art least block the user.