Supposedly if you activate 2FA on every transaction or your wallet, something like that shouldn't be able to happen, but if it's a decentralized wallet and can be opened only with a private key then 2fa will be useless because such a wallet can be used in many applications such as Metamask, so what you pay more attention to is the security on the Private Key that you have so that it cannot be stolen from the contents of the wallet that you have.