My vote on this is that you avoid 2FA requiring third party assistance to move coins.  Not knowing what the future holds I believe its better to maintain 100% self custody of your coins.  Electrum using two computers, with one being cold/air gap is quite secure.  By far the easiest for new users is to simply buy a hardware wallet.  A Trezor one is about 50 dollars and will keep your SEED from ever being discovered by malware of any kind.  Very easy!  Connect the dots simplicity with either Electrum or the Trezor-Suite.  Regardless of which way you choose to go, make sure to employ a "passphrase" of complex length.  By passphrase I mean extended words (they don't have to be words at all just digits, characters, etc....).  Mine are 20+ digits ---- > do it regardless of which hardware wallet you buy.  Don't believe the hype that "our chip" cannot be hacked to get to the SEED.  If you use a STRONG passphrase you could hand them your SEED and still sleep well at night (of course you wouldn't).