2FA is only highly secure when you make sure that you access Google Authenticator through a mobile phone that's connected to a seperate internet connection. In my case I have a smartphone with a mobile internet connection solely meant to host Google Authenticator, and it works like a charm. There have been several cases already where people connected all their devices to the same network and they got their accounts drained like it didn't cost any effort. Everything comes down to how you set up and use everything. 2FA is only worthwhile in case of proper usage. Blindly trusting in 2FA is dangerous, very much so.