Our answer? Throw a few “speed bumps” onto the road with 2FA and hope for the best. Sometimes that works – but sometimes that mobile's SIM has been cloned and it's all for naught. Speed bumps provide the illusion of safety and security, without actually doing much to slow the escape vehicle. To do that requires a bit more of a rethink.
Brings up 2FA only to complain about the very worst form of it that's arguably worse than just having a strong and unique password.
Yes, SMS 2FA does provide only an illusion of safety, because it's garbage and people have been warned against using it for years.
"I don't want to hand over compete kernel and administrative control of my PC just to play a game" seems like a pretty reasonable line to draw.