This is the risk exposure we are talking about it here but many take it lightly and then regret later on.Some have also not enabled 2FA security features while those have enabled it they use the same device where they have authenticator download to get the code and login on the same device so what if it's compromised? I also recommend different devices for security but you should know how to handle them as well.
I meant it. It does not make any better thing for security if we have all in one device. If a hacker can hack our email, our account login information on that device, it is possible to hack 2FA on that device too. So 2FA is a protection against hack, it must be installed on a different device that we don't store a layer 1 information of our accounts.
Having two different devices are good enough for me. One for email and login my account and my phone is only for 2FA. They can not get anything if only successfully exploit one of my two devices.
This means that this is the only way to break the security, which is quite strong. I thought that 2FA security was enough. I understand that it is best to have security by IP, by mail and also by SMS, but if everything is managed by the same device, it would have to be implemented, have a type of security well above these things, and I don't believe that something like this exists, everyone trusts 2fa, what I would advise is that they do not trade or play in casinos from the device because it can be provided for those possible things of being hacked or the phone being stolen.