I'm new to this but wonder if 2FA is really the be all and end all for account security...