I disagree, Two-factor is very important, because if there is a case of your password leaking somewhere, attackers can't do jackshit with it if they don't have the 2FA key. What I can agree on is that 2FA shouldn't be phone number based, as not only is it a privacy concern, YouTubers were getting hacked because of attackers using social engineering to get a hold of their phone number and getting 2FA keys through that way. If the 2FA keys were taken from an app, attackers would have a much, much harder time trying to get them. And keeping them in something like a KeePass database with a strong main password is a very good way to store them safely.Two-factor is only necessary for boomers who think changing "Password" to "Password1" keeps them secure. Disable it if you can, and insult the company's founders when they inevitably pop up a friendly mandatory feedback box demanding why you don't want to be secure, friend, we're just trying to help you (looking at you, Stripe).
If you can't turn it off, link it to a hardware token, never a cell phone or computer; something without the ability to track you independently of your use of the service.