I absolutely agree with this statement. The best security practice (on and offline) is to trust only yourself, and not to rely on software from companies/people that may have "ulterior motives" for offering that perceived security. In my opinion, short of being a security expert, there are simple enough steps you can take to add an acceptable level of security to your life, from being (very!) careful what you click on, to having a dedicated OS (on a pendrive/external drive, or a separate computer if you can afford it) for your crypto.
2FA and other security methods work, and will keep on working for a while, until somebody (a bad guy) cracks them, or a good guy realizes there's money to be made off of them. Best security method is for nobody to even know you have crypto to begin with.