If you haven't got 2FA enabled on every account you can think of already, please consider all the servers that are going to be sold as-is at bankruptcy auctions and all the cryptominers out there just idly sitting around waiting for hashes to calculate.
@mhoye on the other hand, most places I've seen have SMS as the only allowed second factor and fuck that
Failures in Twitter’s Two-Factor Authentication System - Schneier on Security