2FA, as implemented today, is a massive joke. See the recent Bybit hack. You never know what you're signing. Bitcoin hwws like Trezor and Coldcard are shining exceptions.