Learned this lesson the hard way, enabled 2FA for a certain major service which in turn opened me up to an exploit that didn't effect those not using 2FA. So in enabling 2FA I weakened my acct security and opened a new attack vector. At best if everything is implemented properly you're still now only as secure as your telecoms customer service security practices.