What are common methods to bypass 2FA verification? I know only one, get a copy of identity document, and try to re-issue simcard in mobile operator office. Or try to hack person, find and steal "special codes" that comes together when you set 2FA. Long method - social engineering. However, if a person is cautious, I dont see how someone can get his 2FA or make him turn-off this feature.
The problem is too many people rely nowadays on 2FA instead of actively caring about the security of their accounts. 2FA may be solid, but in the event of it SOMEHOW failing it is a very smart thing to at least have other security aspects on point. For example, a strong password and 2FA is much better than a weak password and 2FA. Make it harder for a bad guy to steal, not easier is the better mentality.