I can't read the article without becoming a member. I'm curious what the main points are? Even if you're logging on to a website on your phone, 2FA still makes sense because if a bad actor has your password, they would still need to steal your phone as well. Without 2FA, they could just use your password on their own device, right?