I have had a few discussions recently about people using 2FA and email (ie sent a 2FA code via email to login) and they have still been hacked/compromised due to the inherent lack of security…