Why doesn't 2FA help MetaMask