Regarding 2FA, here is an article diving into why it’s not implemented.
and here
Getting a hardware wallet and diving into education materials on security measures to take, including for your device, and also how to verify contract details that you’re interacting with is what we can do to empower ourselves in this space. I’ll provide some more links here on this too!