If you use the forgotten-password function, then there's an option to remove the 2FA. So 2FA does not provide any protection in case of a compromised email. Make sure that your email address is secure. If you don't want to set an email address, use something like yourUserName@invalid.bitcointalk.org; don't use a random nonsense email like y@x.com, since somebody might create that domain/email.
This is only correct ans. just keep safe your email address. An email address is not only for your bitcointalk account, that email can be used for many other things, so you must keep your email secure. If a hacker can hack your email address, then it is your failure. Because there are many security options in email through which you can keep your email secure. And also keep the key of the bitcoin address secure. Remember not your key not your bitcoin.
op you got enough Ans from here already. so you can lock this thread now.