Yep with 2FA enabled I cannot login to Bittrex without my phone and I cannot transfer funds without my phone.

I don't hold tokens on exchanges... they are always held in a wallet until I decide to move them for a sell.

I was hacked once... on a forum...nothing lost except my account status was tarnished with bad remarks as hacker was using my
account to spread malware by posting links to malware.  Since that happened I use triple, quadruple or more protection so
I have extra layers of protection.