If you look at the context of the article, you should assume that phishing attack is sophisticated enough and responding to that attack with "you should use 2FA

If you look at the context of the article, you should assume that phishing attack is sophisticated enough and responding to that attack with "you should use 2FA" is missing the point (which is exactly what the author claims). 2FA (at least the simple OTP variants) don't protect against phishing, they just protect against sloppy phishing attempts.