This means that this is the only way to break the security, which is quite strong. I thought that 2FA security was enough.
It's (2FA) enough for you but maybe not enough for others. If you have good behavior on Internet, use a strong password, even no 2FA is still enough. If you install 2FA but doing it not appropriately, not careful enough, it is not enough and it does not increase your safety.
I understand that it is best to have security by IP, by mail and also by SMS, but if everything is managed by the same device, it would have to be implemented, have a type of security well above these things, and I don't believe that something like this exists, everyone trusts 2fa, what I would advise is that they do not trade or play in casinos from the device because it can be provided for those possible things of being hacked or the phone being stolen.
Using 2FA with SMS code is a weakest type of 2FA. You might not receive SMS code from deliver in bad days and can not log in your account. Your sim can be swapped too and that can cause nightmare.
2FA with applications is better than SMS code but back up your 2FA code for recovery and secure your backup carefully like your account password, email password.
Again it's stupid to store all backups at one place. I mean very bad practices are
Install 2FA on a same device you use to login your email and account.
Store your backups for email, account and 2FA at one place.
When accident happens, somebody can get access of all very easily.
