I understand 2fa, but the way many companies have implemented it is such a shit implementation that it's nothing more than security theater designed to purposely make my life difficult, but not actually secure anything. Anything to do with medical stuff seems to be particularly bad. And OMG, don't get me started on the shit they put behind 2fa for no reason other than fuck with you. Why do I need to log in so I can see some completely public information? Just so they can track me... Ok, I will fucking log in then... And it's behind 2fa... And because they don't give a fuck the 2fa server never sends 2fa verification.
So, I think 2fa is technically a great idea and the way to go, but at the same time, I fucking hate 2fa.