That's the problem I see with most of 2FA, you have to reveal more of yourself instead of less, increasing potential attack surface instead of minimizing it. I

That's the problem I see with most of 2FA, you have to reveal more of yourself instead of less, increasing potential attack surface instead of minimizing it. If anything, recent history has shown that you cannot trust anybody on the internet. Even if they're not outright hostile or abusive, they can still get cracked and their data stolen. For myself, I'd rather rely on strong, well-protected passwords and no 2FA as far as possible, but most people might not know how to do that or find it too inconvenient.