IS 2FA Really Necessary?