'Better' if you consider dramatically increasing the chances of getting locked out of your own account to be 'better'. If you're logging in from your phone any

'Better' if you consider dramatically increasing the chances of getting locked out of your own account to be 'better'. If you're logging in from your phone anyway, then it's not really a second factor, so it's meaningless. If you're not, then your phone might be unavailable or charging or something, so you're locked out. And if someone else gets hold of your phone, they can now easily log in, so it increases the attack area. MFA is a bad idea. Biometrics are a bad idea (for similar reasons). Unique passwords (handled with a password manager) are still by far the best solution that we have. Adding epicycles is not the answer. Improving the UX and handling of passwords is the way forward.