2FA is just fine until you are Sim-jacked. DO NOT use your phone as a recovery device. Use another email provider for Google account recovery. Then if you ge

2FA is just fine until you are Sim-jacked. DO NOT use your phone as a recovery device. Use another email provider for Google account recovery. Then if you get SIM-jacked, the culprit can't get into your Google account because your jacked phone number won't get an account recovery code; it will go to your non Google email which you will receive, even if your phone can only access wifi. Do make sure that your Google and non Google email accounts have super strong passwords.