What? that's absolutely not the reason for 2FA... if he can key-log your passwords, he can keylog your 2FA code... deployment of a keylogger means your host is

What? that's absolutely not the reason for 2FA... if he can key-log your passwords, he can keylog your 2FA code... deployment of a keylogger means your host is compromised, from there you can do so much you really don't need someone's password... 2FA is for plain phishing attacks. building phishing attacks against 2FA is significantly harder and usually easier to detect\protect from.