Whats your point? That its pointless to use 2FA because of it not being a perfect protection for all scenarios?