(...)
there is some sense in this claim given the amount of viruses in phones is definitely lower than in computers, but it doesn't mean you can't get virus in phone and it's safe in general
What about the 2FA which gives the additional vector attack for phones, compared to computers? I'll explain: phones can be used as 2FA devices what means that the attacker can control the second authentication channell too.
No it cant be done so easily. If you re using the computer or laptop then you are just using it to open or access that website over the IP however if you are having the 2FA activated which will be via your smartphone then you are still very much secured. Because as long as you dont put the authentication code generated you wont be able to gain access.
Tell you what even when the hackers get your passwords then also he wont be able to access the site or account without that 2FA. And 2FA always keeps changing every other 10 seconds and never repeat itself ever.
I guess this combination of both is far more secure rather than just using the phone.
I agree that the scenario you describe is secure. What I was trying to say is that if you use your 2FA smartphone to log into the sites (even if occassionally or only once or twice, and I have seen my friends do that and I admit I do that myself to log into bank accounts) then you may be in trouble if that phone gets compromised.