2FA is a step backward, but it allows corporations to sell more gizmos and gather user assets they can resell. A 25-character password, like what I use, cannot be cracked for several decades. That's far more security than any of these other gimmicks.