2FA is an extra layer of protection, not a panacea. A successful attack would require both an Authy breach and that the attacker have passwords for the service

2FA is an extra layer of protection, not a panacea. A successful attack would require both an Authy breach and that the attacker have passwords for the services that they want to compromise. This should buy you enough time to regenerate your 2FA tokens to mitigate the threat.