Password + password manager can be trivially phished. PIN can’t, because even if you somehow phished a user you can’t use it. I don’t know what “proper 2FA” me

Password + password manager can be trivially phished. PIN can’t, because even if you somehow phished a user you can’t use it. I don’t know what “proper 2FA” means but the gold standard today is U2F, and it has failed to be mass adopted due to requirement to purchase and maintain another device.