2FA is more than defending against bad passwords but also compromised passwords (e.g. you accidentally share it in a public forum) and phishing attacks. It's ve

2FA is more than defending against bad passwords but also compromised passwords (e.g. you accidentally share it in a public forum) and phishing attacks. It's very unlikely a bad actor has access to both factors.