2FA is as unsafe as troditional verification. It must trust the third party as you use it. password may be decrypted.