I think it's good to set as many precautions as possible. 2fa and sms confirmations are a good way to secure your account, but at first take care of your password. It should be quite hard and never qiven out to anyone.