Google found out that almost 100% of automated phishing attacks can be prevented with ANY form of 2FA: https://security.googleblog.com/2019/05/new-research-how-effective-is-basic.html
(http://feeds.feedburner.com/~ff/inThirty?d=yIl2AUoC8zA) (http://feeds.feedburner.com/~ff/inThirty?d=qj6IDK7rITs)
(http://feeds.feedburner.com/~r/inThirty/~4/aXnR8kVtc-M)