No, if you have 2FA peopel can steal you data on a compromised system but not your whole account. With googles 2FA implementation they can steal your whole acc

No, if you have 2FA peopel can steal you data on a compromised system but not your whole account. With googles 2FA implementation they can steal your whole account. If the compromised system has no way to get your second factor it can't disable/change the second factor methods and can't independently log in. EDIT: Sure there are probably many other ways to then trick the user into giving 2FA permission to e.g. change 2FA auth. But this is harder and not always viable in all situations.