2FA auth is fundamentally harder to crack due to computational complexities and also physical constrains and it is definitely better than just a plain password.

2FA auth is fundamentally harder to crack due to computational complexities and also physical constrains and it is definitely better than just a plain password. Also, 2FA doesn't add extra inconvenience when done the right way - see google's 2FA. I am not quite sure what to make out of this article but here is a simple scenario which I believe it puts everything in a bit of perspective. Say that I somehow loose my password. Without 2FA that's it - the attacker is in. With 2FA the attacker will have to do more work. I don't care how complex is to crack to token. The point is that just because you know a secret it doesn't give you all other secrets.