It helps security tremendously (against local device malware) if you use hardware 2FA, which is now widely supported and is used by the security conscious. So

It helps security tremendously (against local device malware) if you use hardware 2FA, which is now widely supported and is used by the security conscious. So does sandboxing and file system access permissions.