I'd say it avoids it, mitigates would work fine. The sum of the authentication credentials passed to the application is different for each site. with 2FA you

I'd say it avoids it, mitigates would work fine. The sum of the authentication credentials passed to the application is different for each site. with 2FA you submit password + token. so an attacker who is replaying compromised credentials can't gain unauthorised access with them alone.