Desktop antivirus and 2FA aren't infallible though. Desktop antivirus is essentially just playing catch-up with security threats from various online sources and it isn't going to protect you against everything; mostly just malicious files that it encounters or patterns in code that are shown to be malicious in the past. 2FA can be beaten provided they know your name and your phone provider, they can snake a SIM card copy and that can make your 2FA useless, but it is unlikely that someone will go tot hat trouble to go after your wallet unless they see a lot of value in doing so.

Or they can just go after the wallet.dat and restore that information.