A fatal mistake Bitcoiners make is not disabling cloud backup on the Google authenticator app.
The app installs with cloud backup turned on, and if you don't disable it, and hackers breach your Google account, it gives them access to your authenticator app, thus eliminating that additional layer of 2FA protection.