2FA is only required for logins on new / unrecognized devices. If someone else had my master password, they still could not login. I am only required to enter

2FA is only required for logins on new / unrecognized devices. If someone else had my master password, they still could not login. I am only required to enter my 2FA on the installation of each client, so there is no really loss of convenience.