[em-bee]

true, 2FA prevents against people pretending to be you trying to log into the site, but not against sites pretending to be the site you want to access.