Sort:  

You can improve the security with 2FA, and you can also add your own layer of security on top of that.

Indeed! 2FA all the things with something like the Google Authenticator. Via text message used to be a thing, but now that's not recommended because spoofing mobile numbers is getting too easy.

What do you recommend instead?

Oh wait, you're saying 2FA with Google Authenticator (or similar) is good, but not the "2FA" that involves sending a text with code to mobile number. If I understand right, then yes, I agree.

Yep, sounds like you figured out my meaning.