[ocdtrekkie]

2FA is more than adequate on its own in a lot of cases: Attackers tend to go for low lying fruit.

Also, how worried you need to be depends on what you use the account for... People go off the deep end about securing every single account like it's Fort Knox, but you need to consider what is at risk if a given account is compromised, and what damage could be done with it.