That's why it is very important to have 2FA authentication to give safety at your wallet more than enough that email confirmation can do.
You can have 2FA, only if you use custodial wallets and rely on third parties. Not only custodial wallets doesn't make your coins safe, but also, it puts them at more risk.
It's not a good idea to use custodial wallets and 2FA, because you cannot keep your coins secure.