We will only realize it’s important the time we needed it and mostly this realizations happens late. When I lose my phone I also don’t have 2fa or even locked in my phone that makes it easier to anyone who got my phone to access it. As much as possible now I put all security my phone can have lock, fingerprint,passwords and face detection. And when it comes in finance related accounts there is 2fa and stricter password.
our regret will always come lately , and unfortunately why we don't doing this since early to prevent unexpected accident. for every worthed account we must secure it with multiple layer authentification , we could using sms code or google auth. with this additional setting i am believe someone will hard to access our account.