> Two-factor authentication is a second basket.

Not in my books. Recommended to be sure, but this has far too many single points of failure. To name a few:

- Software corrupts data

- Hardware corrupts data

- Social engineering bypasses 2FA